c1a3cba28b
Hacktivism mon page is max-search only on bank/exchange/taler. Remove classic /monitoring-ladder units, monpages catalog, and Caddy bare redirs.
76 lines
2.9 KiB
Text
76 lines
2.9 KiB
Text
# Host Caddy (root service). Place BEFORE catch-all reverse_proxy in each site block.
|
|
#
|
|
# CRITICAL: bare paths (no trailing slash) must redirect to slash, or the request
|
|
# falls through to merchant/bank/exchange API → Taler JSON code 21.
|
|
#
|
|
# CORRECT (site-level named matcher — preferred):
|
|
# @mon_bare path /monitoring /monitoring_err \
|
|
# /monitoring-max-ladder /monitoring-max-ladder_err \
|
|
# /taler-monitoring-surface /taler-monitoring-surface_err \
|
|
# /taler-monitoring-aptdeploy /taler-monitoring-aptdeploy_err
|
|
# redir @mon_bare {path}/ 302
|
|
#
|
|
# ALSO OK inside handle (matcher must be `*`):
|
|
# handle /taler-monitoring-surface {
|
|
# redir * /taler-monitoring-surface/ 302
|
|
# }
|
|
#
|
|
# WRONG (Caddy footgun — causes merchant code 21 on bare URLs):
|
|
# redir /taler-monitoring-surface/ 302
|
|
# → parsed as matcher=/taler-monitoring-surface/ to="302"
|
|
# → Location: 302, or no-op then fallthrough to reverse_proxy
|
|
#
|
|
# root must be the *host directory* (…/monitoring-sites/{host}), and the
|
|
# file_server matcher a path *prefix* (`/monitoring*`), so
|
|
# /monitoring/index.html maps to {root}/monitoring/index.html.
|
|
#
|
|
# Disk layout:
|
|
# /var/www/monitoring-sites/{host}/monitoring/index.html
|
|
# /var/www/monitoring-sites/taler.hacktivism.ch/taler-monitoring-*/index.html
|
|
#
|
|
# Live apply on koopa (absolute path — ~ as root is /root):
|
|
# sudo ${APPLY_MONITORING_LIVE}
|
|
# Runtime-only (no sudo; hernani admin API):
|
|
# curl -g -X POST http://[::1]:2019/load -H 'Content-Type: text/caddyfile' \
|
|
# --data-binary @${KOOPA_CADDY_DIR}/Caddyfile
|
|
|
|
# --- only inside taler.hacktivism.ch { ... } ---
|
|
@mon_bare path /monitoring /monitoring_err \
|
|
/monitoring-max-ladder /monitoring-max-ladder_err \
|
|
/taler-monitoring-surface /taler-monitoring-surface_err \
|
|
/taler-monitoring-aptdeploy /taler-monitoring-aptdeploy_err \
|
|
/taler-monitoring-mail /taler-monitoring-mail_err \
|
|
/taler-monitoring-mattermost /taler-monitoring-mattermost_err
|
|
redir @mon_bare {path}/ 302
|
|
|
|
handle /taler-monitoring-surface_err* {
|
|
root * /var/www/monitoring-sites/taler.hacktivism.ch
|
|
file_server
|
|
}
|
|
handle /taler-monitoring-surface* {
|
|
root * /var/www/monitoring-sites/taler.hacktivism.ch
|
|
file_server
|
|
}
|
|
handle /taler-monitoring-aptdeploy_err* {
|
|
root * /var/www/monitoring-sites/taler.hacktivism.ch
|
|
file_server
|
|
}
|
|
handle /taler-monitoring-aptdeploy* {
|
|
root * /var/www/monitoring-sites/taler.hacktivism.ch
|
|
file_server
|
|
}
|
|
|
|
# --- bank + exchange + taler (each site block; set root host dir) ---
|
|
# /monitoring* already covers /monitoring-max-ladder*
|
|
@mon_bare path /monitoring /monitoring_err \
|
|
/monitoring-max-ladder /monitoring-max-ladder_err
|
|
redir @mon_bare {path}/ 302
|
|
|
|
handle /monitoring_err* {
|
|
root * /var/www/monitoring-sites/{host}
|
|
file_server
|
|
}
|
|
handle /monitoring* {
|
|
root * /var/www/monitoring-sites/{host}
|
|
file_server
|
|
}
|