fruworg/infrastructure
1
0
Fork 0
mirror of https://github.com/fruworg/infrastructure.git synced 2024-09-28 10:10:34 +03:00
Code Issues Packages Projects Releases Wiki Activity

Update Caddyfile

Browse Source
This commit is contained in:
Руслан 2023-10-08 23:38:20 +06:00 committed by GitHub
parent d1dc921d73
commit bdc7be3ce4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 28 additions and 26 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

54
configs/Caddyfile
View File

@ -3,9 +3,14 @@
acme_dns google_domains {$CADDY_API_KEY}
}
fruw.org {
root * /var/caddy/hugo
file_server
}
ok.fruw.org {
@block {
not remote_ip forwarded {$WHITE_LIST}
not client_ip {$WHITE_LIST}
}
handle @block {
basicauth {
@ -15,33 +20,30 @@ ok.fruw.org {
header_up X-Real-IP {remote_host}
}
}
respond "IP already added! :)"
respond "IP bleached! :)"
}
vault.fruw.org {
handle_path / {
handle_path /admin {
@block {
not client_ip {$WHITE_LIST}
}
handle @block {
redir https://ok.fruw.org
}
reverse_proxy localhost:50000
}
handle_path /* {
@allow {
remote_ip forwarded {$WHITE_LIST}
}
handle @allow {
reverse_proxy localhost:50000
}
respond 403
}
reverse_proxy localhost:50000
}
mail.fruw.org {
@allow {
remote_ip forwarded {$WHITE_LIST}
@block {
not client_ip {$WHITE_LIST}
}
handle @allow {
reverse_proxy localhost:50001
handle @block {
redir https://ok.fruw.org
}
respond 403
reverse_proxy localhost:50001
}
matrix.fruw.org, matrix.fruw.org:8448 {
@ -59,14 +61,14 @@ turn.fruw.org {
}
rclone.fruw.org {
@allow {
remote_ip forwarded {$WHITE_LIST}
@block {
not client_ip {$WHITE_LIST}
}
handle @allow {
reverse_proxy 127.0.0.1:53682
respond "nothing to auth" 404
handle @block {
redir https://ok.fruw.org
}
respond 403
reverse_proxy 127.0.0.1:53682
respond "nothing to auth" 404
}
cs.fruw.org {
@ -78,7 +80,7 @@ doom.fruw.org {
}
fs.fruw.org, http://fs.fruw.org {
root * /var/caddy
root * /var/caddy/fs
file_server browse
}
@ -87,6 +89,6 @@ ip.fruw.org, http://ip.fruw.org {
respond "{{.RemoteIP}}"
}
fruw.org, *.fruw.org {
*.fruw.org {
respond "hello there"
}