hernani/koopa-admin-log
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

caddy: 8085/8443 + systemd 80/443 proxies; drop --resume

Browse source
This commit is contained in:
Hernâni Marques 2026-07-08 14:29:13 +02:00
parent 72c67f9b24
commit b587bb0eeb
No known key found for this signature in database
12 changed files with 82 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

13
host/systemd/README.md Normal file
View file

@ -0,0 +1,13 @@
# systemd units (host)
| Unit | Role |
|------|------|
| `caddy.service` | reverse proxy (drop-in: no `--resume`) |
| `http-proxy.socket` | bind **:80** → `systemd-socket-proxyd` → `127.0.0.1:9000` |
| `https-proxy.socket` | bind **:443** → `systemd-socket-proxyd` → `127.0.0.1:9001` |
| `https-proxy@.service` | template: `systemd-socket-proxyd 127.0.0.1:%i` |
| `firewalld.service` | host firewall |
| `sshd.service` | SSH |
| `tor.service` | Tor relay (ORPort 8080) |
Privileged ports 80/443 are held by **systemd**, not by Caddy (Caddy listens on 9000/9001 as user `caddy`).