Add edge01 Caddy configuration

2026-08-03 12:05:11 -04:00
parent 7daba4343e
commit ea924fd405
2 changed files with 104 additions and 0 deletions
@@ -0,0 +1,66 @@
+{
+        email chris@zerafa.com
+}
+
+edge01.zerafa.com {
+        root * /srv
+        encode zstd gzip
+        file_server
+
+        header {
+                Strict-Transport-Security "max-age=31536000; includeSubDomains"
+                X-Content-Type-Options "nosniff"
+                X-Frame-Options "DENY"
+                Referrer-Policy "strict-origin-when-cross-origin"
+                -Server
+        }
+}
+
+git.zerafa.com {
+        reverse_proxy gitea:3000
+}
+
+portainer.zerafa.com {
+        reverse_proxy portainer:9000
+}
+
+voyager.zerafa.com {
+        root * /srv/voyager
+        encode zstd gzip
+        file_server
+
+        header {
+                Strict-Transport-Security "max-age=31536000; includeSubDomains"
+                X-Content-Type-Options "nosniff"
+                X-Frame-Options "DENY"
+                Referrer-Policy "strict-origin-when-cross-origin"
+                -Server
+        }
+}
+
+mx.zerafa.com {
+        respond "Zerafa Mail Gateway" 200
+
+        header {
+                Strict-Transport-Security "max-age=31536000"
+                X-Content-Type-Options "nosniff"
+                X-Frame-Options "DENY"
+                -Server
+        }
+}
+
+rspamd.zerafa.com {
+        reverse_proxy rspamd:11334
+
+        header {
+                Strict-Transport-Security "max-age=31536000"
+                X-Content-Type-Options "nosniff"
+                X-Frame-Options "SAMEORIGIN"
+                Referrer-Policy "strict-origin-when-cross-origin"
+                -Server
+        }
+}
+
+adsb.zerafa.com {
+    reverse_proxy 192.168.161.31:8080
+}
@@ -0,0 +1,38 @@
+services:
+  caddy:
+    image: caddy:2-alpine
+    container_name: caddy
+    restart: unless-stopped
+
+    ports:
+      - "80:80"
+      - "443:443"
+      - "443:443/udp"
+
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - ./site:/srv:ro
+      - ./data:/data
+      - ./config:/config
+
+    networks:
+      - proxy
+
+    security_opt:
+      - no-new-privileges:true
+
+    cap_drop:
+      - ALL
+
+    cap_add:
+      - NET_BIND_SERVICE
+
+    logging:
+      driver: json-file
+      options:
+        max-size: "10m"
+        max-file: "3"
+
+networks:
+  proxy:
+    external: true