20 lines
514 B
Text
20 lines
514 B
Text
# Multi-domain reverse proxy (TLS terminate on host)
|
|
# Backend today: container nginx TLS on 8081
|
|
|
|
{
|
|
# no global auto-HTTPS email yet; per-site manual certs
|
|
auto_https disable_redirects
|
|
}
|
|
|
|
taler.hacktivism.ch {
|
|
tls /etc/caddy/certs/taler.hacktivism.ch/fullchain.pem /etc/caddy/certs/taler.hacktivism.ch/privkey.pem
|
|
|
|
reverse_proxy https://127.0.0.1:8081 {
|
|
transport http {
|
|
tls_insecure_skip_verify
|
|
}
|
|
header_up Host {host}
|
|
header_up X-Forwarded-Host {host}
|
|
header_up X-Forwarded-Proto {scheme}
|
|
}
|
|
}
|