feat: adapt caddyfile to new static sites

This commit is contained in:
2026-01-26 12:39:11 +00:00
parent ecb0094904
commit 488cd8eef4
2 changed files with 44 additions and 23 deletions

View File

@@ -287,14 +287,14 @@ motsdepasse.interstices.pro {
nextcloud.lucasroyer.fr { nextcloud.lucasroyer.fr {
# Security # Security
header { header {
X-Frame-Options "SAMEORIGIN" X-Frame-Options "SAMEORIGIN"
X-Content-Type-Options "nosniff" X-Content-Type-Options "nosniff"
X-XSS-Protection "1; mode=block" X-XSS-Protection "1; mode=block"
Referrer-Policy "no-referrer" Referrer-Policy "no-referrer"
Strict-Transport-Security "max-age=15552000; includeSubDomains; preload" Strict-Transport-Security "max-age=15552000; includeSubDomains; preload"
-Server -Server
} }
# Large files # Large files
request_body { request_body {
@@ -313,9 +313,9 @@ nextcloud.lucasroyer.fr {
reverse_proxy nextcloud-web:80 { reverse_proxy nextcloud-web:80 {
header_up Host {host} header_up Host {host}
header_up X-Real-IP {remote_host} header_up X-Real-IP {remote_host}
header_down X-Frame-Options "SAMEORIGIN" header_down X-Frame-Options "SAMEORIGIN"
header_down X-Content-Type-Options "nosniff" header_down X-Content-Type-Options "nosniff"
} }
} }
onlyoffice.lucasroyer.fr { onlyoffice.lucasroyer.fr {
@@ -337,6 +337,8 @@ onlyoffice.lucasroyer.fr {
} }
spationautes.fr { spationautes.fr {
root * /srv/site-spationautes/html
# Server cache # Server cache
cache { cache {
ttl 24h ttl 24h
@@ -353,9 +355,7 @@ spationautes.fr {
# Errors # Errors
handle_errors { handle_errors {
# If error is 502, 503 or 504, show error.html without changing client URL
@service_out expression {err.status_code} >= 502 && {err.status_code} <= 504 @service_out expression {err.status_code} >= 502 && {err.status_code} <= 504
handle @service_out { handle @service_out {
root * /srv root * /srv
rewrite * /error.html rewrite * /error.html
@@ -372,7 +372,7 @@ spationautes.fr {
} }
# Redirect # Redirect
reverse_proxy site-spationautes:80 file_server
} }
veloboomboom.internantes.ovh, veloboomboom.lucasroyer.fr { veloboomboom.internantes.ovh, veloboomboom.lucasroyer.fr {
@@ -381,6 +381,7 @@ veloboomboom.internantes.ovh, veloboomboom.lucasroyer.fr {
ttl 24h ttl 24h
stale 12h stale 12h
} }
# Security # Security
header { header {
X-Frame-Options "DENY" X-Frame-Options "DENY"
@@ -394,7 +395,6 @@ veloboomboom.internantes.ovh, veloboomboom.lucasroyer.fr {
handle_errors { handle_errors {
# If error is 502, 503 or 504, show error.html without changing client URL # If error is 502, 503 or 504, show error.html without changing client URL
@service_out expression {err.status_code} >= 502 && {err.status_code} <= 504 @service_out expression {err.status_code} >= 502 && {err.status_code} <= 504
handle @service_out { handle @service_out {
root * /srv root * /srv
rewrite * /error.html rewrite * /error.html
@@ -410,14 +410,33 @@ veloboomboom.internantes.ovh, veloboomboom.lucasroyer.fr {
output file /data/site-veloboomboom_access.log output file /data/site-veloboomboom_access.log
} }
# Redirect # Prod redirect
reverse_proxy site-veloboomboom:80 @prod host veloboomboom.internantes.ovh
handle @prod {
root * /srv/site-veloboomboom/html-prod
file_server
}
# Test redirect
@test host veloboomboom.lucasroyer.fr
handle @test {
basic_auth {
testuser $2a$14$hNv5hbag695p/jcyB.7qeOoCvqxQ0L6zyBptfHU15qnTtmivfXAea
}
root * /srv/site-veloboomboom/html-test
file_server
}
# Fallback (si aucun des deux domaines ne match, bien que peu probable ici)
handle {
respond "Not Found" 404
}
} }
csv.lucasroyer.fr { csv.lucasroyer.fr {
root * /srv/csv root * /srv/csv
file_server browse file_server browse
header Content-Type "text/csv; charset=utf-8" header Content-Type "text/csv; charset=utf-8"
header Access-Control-Allow-Origin "*" header Access-Control-Allow-Origin "*"
} }

View File

@@ -13,6 +13,8 @@ services:
- /home/lucas/services/reverse-proxy/Caddyfile:/etc/caddy/Caddyfile - /home/lucas/services/reverse-proxy/Caddyfile:/etc/caddy/Caddyfile
- /home/lucas/services/reverse-proxy/error.html:/srv/error.html:ro - /home/lucas/services/reverse-proxy/error.html:/srv/error.html:ro
- /home/lucas/services/n8n/local-files/csv:/srv/csv:ro - /home/lucas/services/n8n/local-files/csv:/srv/csv:ro
- /home/lucas/services/static-sites/site-spationautes:/srv/site-spationautes:ro
- /home/lucas/services/static-sites/site-veloboomboom:/srv/site-veloboomboom:ro
networks: networks:
- reverse-proxy - reverse-proxy
ports: ports: