diff --git a/README.md b/README.md index ac2b3a2..cce5637 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,17 @@ # dwalin.netig.net -Make sur to use plain `tabs` into the Caddyfiles and one empty line at the end. +Reverse proxy Caddy des sites et services hébergés sur le VPS. + +## Vérifier et recharger la configuration + +```sh +docker compose exec caddy caddy validate --config /etc/caddy/Caddyfile +docker compose exec caddy caddy reload --config /etc/caddy/Caddyfile +``` + +Pour consulter les journaux : + +```sh +docker compose logs -f caddy +``` + diff --git a/compose.yml b/compose.yml index ebff7e7..6706298 100644 --- a/compose.yml +++ b/compose.yml @@ -1,23 +1,13 @@ +name: dwalinnetignet + services: caddy: image: caddy:latest - container_name: caddy - network_mode: "host" restart: unless-stopped - #ports: - # - "80:80" - # - "443:443" - # - "443:443/udp" + network_mode: host + volumes: - ./volumes/data:/data - ./volumes/config:/config - - ./conf/Caddyfile:/etc/caddy/Caddyfile - - ./conf/files.caddy:/etc/caddy/files.caddy - - ./conf/docs.caddy:/etc/caddy/docs.caddy - - ./conf/mails.caddy:/etc/caddy/mails.caddy - - ./conf/services.caddy:/etc/caddy/services.caddy - - ./conf/websites.caddy:/etc/caddy/websites.caddy - # Static files - #- /srv/chimera.netig.net/public:/srv/chimera.netig.net/public:ro - #- /home/tristan/public:/home/tristan/public:ro + - ./conf:/etc/caddy:ro - /srv/ecarte/doc:/srv/ecarte/doc:ro diff --git a/conf/services.caddy b/conf/services.caddy index eaeca76..e0698a5 100644 --- a/conf/services.caddy +++ b/conf/services.caddy @@ -1,59 +1,59 @@ https://git.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9000 + reverse_proxy 127.0.0.1:9000 } https://webmail.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9001 + reverse_proxy 127.0.0.1:9001 } https://cloud.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9002 + reverse_proxy 127.0.0.1:9002 } https://collabora.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9003 + reverse_proxy 127.0.0.1:9003 } https://calc.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9004 + reverse_proxy 127.0.0.1:9004 } https://pad.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9005 + reverse_proxy 127.0.0.1:9005 } https://drop.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9006 + reverse_proxy 127.0.0.1:9006 } https://list.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9008 + reverse_proxy 127.0.0.1:9008 } https://status.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9009 + reverse_proxy 127.0.0.1:9009 } https://info-marche-quimper.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9010 + reverse_proxy 127.0.0.1:9010 } https://doli.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9011 + reverse_proxy 127.0.0.1:9011 } https://stats.netig.net { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:9012 + reverse_proxy 127.0.0.1:9012 } diff --git a/conf/websites.caddy b/conf/websites.caddy index ee2923e..07ce335 100644 --- a/conf/websites.caddy +++ b/conf/websites.caddy @@ -27,10 +27,10 @@ https://lescarnetsdakkadien.netig.net { # clickjacking protection header X-Frame-Options DENY - reverse_proxy localhost:8002 + reverse_proxy 127.0.0.1:8002 } https://www.lachaussettedelocquirec.fr { header Strict-Transport-Security max-age=31536000; - reverse_proxy localhost:8003 + reverse_proxy 127.0.0.1:8003 }