148 lines
3.5 KiB
Caddyfile
148 lines
3.5 KiB
Caddyfile
(auth) {
|
|
basicauth {
|
|
admin $2a$14$DahHUWD2cKyXJ96sH5VQwuQv1bqmIn0gsdoSaw4mofzfdNY2Y0VsO
|
|
}
|
|
}
|
|
|
|
(common) {
|
|
encode gzip zstd
|
|
header {
|
|
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
|
|
X-Content-Type-Options "nosniff"
|
|
X-Frame-Options "DENY"
|
|
X-XSS-Protection "1; mode=block"
|
|
Referrer-Policy "strict-origin-when-cross-origin"
|
|
Permissions-Policy "geolocation=(), microphone=(), camera=(), payment=()"
|
|
Cross-Origin-Opener-Policy "same-origin"
|
|
Cross-Origin-Resource-Policy "same-origin"
|
|
Cross-Origin-Embedder-Policy "require-corp"
|
|
Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data:"
|
|
Expect-CT "max-age=86400, enforce"
|
|
}
|
|
|
|
# Blockera kända skadliga sökvägar för alla domäner
|
|
@blocked path_regexp ^/(\.env|\.git|wp-login|robots\.txt|api/graphql|actuator/env|\.DS_Store|file6\.php|wp-.*\.php|config\.json|telescope|debug|info\.php|class-.*\.php|spawns\.php|cream1\.php|dal\.php|wp-good\.php|vx\.php|00\.php|cxs\.php|sdm\.php|whs.*\.php|wp-lvminl\.php|hoeig\.php|bajah\.php|ponxnwapemsce\.php|gk\.php|awp-careers\.php|wplogbak\.php)$
|
|
respond @blocked 403
|
|
|
|
# Blockera kända botar
|
|
@blocked_bots header_regexp User-Agent (scanhawk|leakix|CensysInspect|l9scan|sqlmap|Nikto|DirBuster|OpenAI-SearchBot|oai-searchbot|Mozilla\/5\.0 \(compatible;.*\)
|
|
respond @blocked_bots 403
|
|
}
|
|
|
|
test.gynther.se {
|
|
import auth
|
|
import common
|
|
reverse_proxy recipe-flutter:5000
|
|
}
|
|
|
|
nzbget.gynther.se {
|
|
import common
|
|
reverse_proxy http://192.168.50.4:6789
|
|
}
|
|
|
|
prowlarr.gynther.se {
|
|
import common
|
|
reverse_proxy http://prowlarr:9696
|
|
}
|
|
|
|
radarr.gynther.se {
|
|
import common
|
|
reverse_proxy http://radarr:7878
|
|
}
|
|
|
|
sonarr.gynther.se {
|
|
import common
|
|
reverse_proxy http://sonarr:8989
|
|
}
|
|
|
|
jellyfin.gynther.se {
|
|
import common
|
|
reverse_proxy http://jellyfin:8096
|
|
}
|
|
|
|
qbittorrent.gynther.se {
|
|
import common
|
|
reverse_proxy 192.168.50.4:8080
|
|
}
|
|
|
|
wetty.gynther.se {
|
|
import auth
|
|
import common
|
|
redir / /wetty
|
|
reverse_proxy wetty:3003
|
|
}
|
|
|
|
gitea.gynther.se {
|
|
import common
|
|
reverse_proxy 192.168.50.2:3002
|
|
}
|
|
|
|
# ============================================
|
|
# Import Service (Document Converter) - Standalone UI
|
|
# ============================================
|
|
import.gynther.se {
|
|
import common
|
|
|
|
# Lägg till en standard-sida för /
|
|
handle / {
|
|
respond "Welcome to Import Service" 200
|
|
}
|
|
|
|
reverse_proxy importer-api:3001
|
|
}
|
|
|
|
# ============================================
|
|
# RECIPE APP + IMPORT SERVICE
|
|
# ============================================
|
|
recept.gynther.se {
|
|
import common
|
|
|
|
# === IMPORT SERVICE (Document Converter) ===
|
|
# Dessa endpoints måste komma FÖRST innan backend reglerna!
|
|
handle /api/recipes/import* {
|
|
reverse_proxy importer-api:3001
|
|
}
|
|
|
|
# === RECIPE FRONTEND PROXY ENDPOINTS ===
|
|
# Next.js API routes
|
|
handle /api/inventory-history-proxy {
|
|
reverse_proxy recipe-flutter:5000
|
|
}
|
|
|
|
handle /api/admin/merge-preview-proxy {
|
|
reverse_proxy recipe-flutter:5000
|
|
}
|
|
|
|
handle /api/recipe-preview-proxy {
|
|
reverse_proxy recipe-flutter:5000
|
|
}
|
|
|
|
# === RECIPE BACKEND API ENDPOINTS ===
|
|
# Backend körs på port 8080 (från docker-compose)
|
|
handle /api/products* {
|
|
reverse_proxy recipe-api:8080
|
|
}
|
|
|
|
handle /api/inventory* {
|
|
reverse_proxy recipe-api:8080
|
|
}
|
|
|
|
handle /api/recipes* {
|
|
reverse_proxy recipe-api:8080
|
|
}
|
|
|
|
# === HEALTH CHECKS ===
|
|
handle /health {
|
|
reverse_proxy recipe-api:8080
|
|
}
|
|
|
|
# === CATCH ALL ===
|
|
# Övriga /api/* går till frontend
|
|
handle /api/* {
|
|
reverse_proxy recipe-flutter:5000
|
|
}
|
|
|
|
# Frontend - catch all remaining routes (port 5000)
|
|
reverse_proxy /* recipe-flutter:5000
|
|
}
|