randomayzer/deploy/randomayzer.Caddyfile

29 lines
842 B
Caddyfile

# Add this site only to an existing Caddy. Replace BASIC_AUTH_HASH with `caddy hash-password` output.
random.ochenstarik.ru {
tls {
issuer acme {
disable_tlsalpn_challenge
}
}
basic_auth {
owner BASIC_AUTH_HASH
}
request_body {
max_size 1MB
}
# No access log: OAuth callback query values are sensitive.
reverse_proxy 10.77.0.3:3100 {
header_up Host random.ochenstarik.ru
header_up X-Forwarded-Host random.ochenstarik.ru
header_up X-Forwarded-Proto https
header_up X-Forwarded-For {remote_host}
header_up -X-Real-IP
header_up -Forwarded
header_up -CF-Connecting-IP
header_up -Authorization
transport http {
dial_timeout 10s
response_header_timeout 120s
}
}
}