first commit

.gitignore

@@ -0,0 +1 @@
+volumes/

README.md

@@ -0,0 +1,3 @@
+# caddy
+
+Make sur to use plain `tabs` into the Caddyfiles and one empty line at the end.

compose.yml

@@ -0,0 +1,20 @@
+services:
+  caddy:
+    image: caddy:latest
+    container_name: caddy
+    network_mode: "host"
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+      - "443:443/udp"
+    volumes:
+      - ./volumes/data:/data
+      - ./volumes/config:/config
+      - ./conf/Caddyfile:/etc/caddy/Caddyfile
+      - ./conf/files.caddy:/etc/caddy/files.caddy
+      - ./conf/mails.caddy:/etc/caddy/mails.caddy
+      - ./conf/services.caddy:/etc/caddy/services.caddy
+      - ./conf/websites.caddy:/etc/caddy/websites.caddy
+      # Static files
+      - /srv/dwalin/chimera.netig.net/public:/srv/dwalin/chimera.netig.net/public:ro

conf/Caddyfile

@@ -0,0 +1,4 @@
+import files.caddy
+import mails.caddy
+import services.caddy
+import websites.caddy

conf/files.caddy

@@ -0,0 +1,4 @@
+https://chimera.netig.net {
+	root * /srv/dwalin/chimera.netig.net/public
+	file_server browse
+}

conf/mails.caddy

@@ -0,0 +1,11 @@
+mail.netig.net {
+	respond "Mail domain only"
+}
+
+mail.lachaussettedebrasparts.fr {
+	respond "Mail domain only"
+}
+
+mail.lachaussettedelocquirec.fr {
+	respond "Mail domain only"
+}

conf/services.caddy

@@ -0,0 +1,59 @@
+https://git.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9000
+}
+
+https://webmail.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9001
+}
+
+https://cloud.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9002
+}
+
+https://collabora.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9003
+}
+
+https://calc.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9004
+}
+
+https://pad.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9005
+}
+
+https://drop.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9006
+}
+
+https://p2e.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9007
+}
+
+https://list.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9008
+}
+
+https://status.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9009
+}
+
+https://info-marche-quimper.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9010
+}
+
+https://doli.netig.net {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:9011
+}

conf/websites.caddy

@@ -0,0 +1,25 @@
+https://netig.net {
+	# enable HSTS
+	header Strict-Transport-Security max-age=31536000;
+	# disable clients from sniffing the media type
+	header X-Content-Type-Options nosniff
+	# clickjacking protection
+	header X-Frame-Options DENY
+
+	reverse_proxy localhost:8000
+}
+
+https://taal-academie.arree.bzh {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:8001
+}
+
+https://lachaussettedebrasparts.fr {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:8002
+}
+
+https://www.lachaussettedelocquirec.fr {
+	header Strict-Transport-Security max-age=31536000;
+	reverse_proxy localhost:8003
+}