1.1.0 Release caddy-app
This commit is contained in:
30
config/services/containers/common/caddy/etc/app/Caddyfile.j2
Normal file
30
config/services/containers/common/caddy/etc/app/Caddyfile.j2
Normal file
@@ -0,0 +1,30 @@
|
||||
{
|
||||
servers {
|
||||
# Only accept packets from auth main caddy
|
||||
trusted_proxies static {{ hostvars['fw']['network4']['auth']['server'] }} {{ hostvars['fw']['network6']['auth']['server'] }}
|
||||
}
|
||||
}
|
||||
# Private TLS ACME with DNS-01-challenge
|
||||
(private_tls) {
|
||||
tls {
|
||||
issuer acme {
|
||||
dir https://{{ infra_uri['ca']['domain'] }}:{{ infra_uri['ca']['ports']['https'] }}/acme/acme@ilnmors.internal/directory
|
||||
dns rfc2136 {
|
||||
server {{ infra_uri['bind']['domain'] }}:{{ infra_uri['bind']['ports']['dns'] }}
|
||||
key_name acme-key
|
||||
key_alg hmac-sha256
|
||||
key "{file./run/secrets/CADDY_ACME_KEY}"
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
app.ilnmors.internal {
|
||||
import private_tls
|
||||
metrics
|
||||
}
|
||||
test.app.ilnmors.internal {
|
||||
import private_tls
|
||||
root * /usr/share/caddy
|
||||
file_server
|
||||
}
|
||||
Reference in New Issue
Block a user