# Caddy on koopa

Live: **`/etc/caddy/Caddyfile`**.  
Mirror: **`configs/caddy/Caddyfile`** (same as `host/caddy/Caddyfile`).

## Reload after edit

```bash
sudo caddy validate --config /etc/caddy/Caddyfile
sudo systemctl reload caddy
```

## dossiers.ngi* — basic_auth (htaccess-in-front)

Caddy **ignores** Apache `.htaccess`. Use:

```bash
sudo bash /home/hernani/koopa-admin-log/scripts/caddy/apply-dossiers-ngi-basicauth.sh
```

Password file (not git): `/home/hernani/koopa-secrets/dossiers-ngi-basicauth.txt`  
Hosts: `dossiers.ngi` / `dossiers.2.ngi` / `dossiers.3.ngi`.hacktivism.ch

## New HTTPS vhost

Add a site block to the Caddyfile (live + mirror), then validate and reload. Include the host in the shared HTTP site list (ACME + redirect) at the bottom of the file.