caddy: sync host/caddy mirror with full vhost map

host/caddy/Caddyfile was stale (Taler-only). Align with configs/caddy
including git.hacktivism.ch :9024 and forgejo-ssh note :9200.
This commit is contained in:
Hernâni Marques 2026-07-10 15:09:37 +02:00
parent b674e57f4e
commit 02c5f97645
No known key found for this signature in database
2 changed files with 158 additions and 53 deletions

View file

@ -1,6 +1,19 @@
# Caddy (host reverse proxy)
# Host Caddy
- Config: `Caddyfile` (also mirrored under `configs/caddy/`)
- TLS certs on disk: `/etc/caddy/certs/{taler,exchange}.hacktivism.ch/`
- HTTP 9000: ACME webroot `/var/www/acme` + redirect to HTTPS
- HTTPS 9001: vhosts → backends 9010 / 9011
Live: `/etc/caddy/Caddyfile` on koopa (root/`caddy` group).
Canonical mirror in this repo: **`configs/caddy/Caddyfile`** (same content as `host/caddy/Caddyfile`).
| Listen | Role |
|--------|------|
| **9000** | HTTP + ACME webroot + HTTPS redirect |
| **9001** | HTTPS vhosts |
Public sites: `taler` / `exchange` / `bank` / `castopod` / `bonfire` / `prime` / `bt` / **`git`**.
Forgejo HTTP: Caddy → `127.0.0.1:9024`. Git SSH is **host :9200** (not Caddy).
Validate/reload on host:
```bash
sudo caddy validate --config /etc/caddy/Caddyfile
sudo systemctl reload caddy
```