hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: add castopod/prime compose mirrors and refresh host snapshots

Browse source 
Mirror live compose for castopod and prime (qBittorrent password
redacted). Update firewalld list-all with 9200/tcp. Mark
Caddyfile.taler-host as legacy; short READMEs for new trees.
This commit is contained in:
Hernâni Marques 2026-07-10 15:11:39 +02:00
parent 02c5f97645
commit 3f0e6b31e6
No known key found for this signature in database
10 changed files with 188 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

28
configs/caddy/Caddyfile.taler-host
View file

@ -1,20 +1,24 @@
# LEGACY — historical Taler-only Caddy sketch (merchant backend :8081).
# Do NOT use on koopa. Current multi-vhost config:
# configs/caddy/Caddyfile (canonical)
# host/caddy/Caddyfile (same content)
#
# Kept only as archaeology of the early taler.hacktivism.ch TLS layout.
# Multi-domain reverse proxy (TLS terminate on host)
# Backend today: container nginx TLS on 8081
# Backend at the time: container nginx TLS on 8081
{
# no global auto-HTTPS email yet; per-site manual certs
auto_https disable_redirects
# no global auto-HTTPS email yet; per-site manual certs
auto_https disable_redirects
}
taler.hacktivism.ch {
tls /etc/caddy/certs/taler.hacktivism.ch/fullchain.pem /etc/caddy/certs/taler.hacktivism.ch/privkey.pem
tls /etc/caddy/certs/taler.hacktivism.ch/fullchain.pem /etc/caddy/certs/taler.hacktivism.ch/privkey.pem
reverse_proxy https://127.0.0.1:8081 {
transport http {
tls_insecure_skip_verify
}
header_up Host {host}
header_up X-Forwarded-Host {host}
header_up X-Forwarded-Proto {scheme}
}
reverse_proxy https://127.0.0.1:8081 {
transport http {
tls_insecure_skip_verify
}
}
}

9
configs/caddy/README.md Normal file
View file

@ -0,0 +1,9 @@
# Caddy config mirrors
| File | Role |
|------|------|
| **`Caddyfile`** | Canonical mirror of host multi-vhost config (`/etc/caddy/Caddyfile`) |
| `git.hacktivism.ch.caddy` | Site-block snippet for Forgejo |
| `Caddyfile.taler-host` | **Legacy** Taler-only sketch — do not deploy |
Also: `host/caddy/Caddyfile` (same as `Caddyfile` here).