From ac61ede97272be3cd8130881794a825a14b98654 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Hern=C3=A2ni=20Marques?= <hernani+magikoopa@vecirex.net>
Date: Fri, 10 Jul 2026 12:54:48 +0200
Subject: [PATCH] gitignore: drop .tmp bench scratch (was wrongly committed)

---
 .gitignore                         |  1 +
 configs/caddy/Caddyfile.taler-host | 13 +++++++++++--
 scripts/taler-exchange/README.md   |  3 ---
 3 files changed, 12 insertions(+), 5 deletions(-)
 delete mode 100644 scripts/taler-exchange/README.md

diff --git a/.gitignore b/.gitignore
index ea5541f..5516c4f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -4,3 +4,4 @@ __pycache__/
 .DS_Store
 *.swp
 *~
+.tmp/
diff --git a/configs/caddy/Caddyfile.taler-host b/configs/caddy/Caddyfile.taler-host
index 8af5bd9..a266110 100644
--- a/configs/caddy/Caddyfile.taler-host
+++ b/configs/caddy/Caddyfile.taler-host
@@ -1,11 +1,20 @@
-# taler LE issued 2026-07-07; on disk under /etc/caddy/certs/
+# Multi-domain reverse proxy (TLS terminate on host)
+# Backend today: container nginx TLS on 8081
+
 {
+	# no global auto-HTTPS email yet; per-site manual certs
 	auto_https disable_redirects
 }
+
 taler.hacktivism.ch {
 	tls /etc/caddy/certs/taler.hacktivism.ch/fullchain.pem /etc/caddy/certs/taler.hacktivism.ch/privkey.pem
+
 	reverse_proxy https://127.0.0.1:8081 {
-		transport http { tls_insecure_skip_verify }
+		transport http {
+			tls_insecure_skip_verify
+		}
 		header_up Host {host}
+		header_up X-Forwarded-Host {host}
+		header_up X-Forwarded-Proto {scheme}
 	}
 }
diff --git a/scripts/taler-exchange/README.md b/scripts/taler-exchange/README.md
deleted file mode 100644
index 2d3de2e..0000000
--- a/scripts/taler-exchange/README.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# taler-exchange scripts
-
-start_* --restart.