diff --git a/Caddyfile b/Caddyfile index 2c9350b..adb4647 100755 --- a/Caddyfile +++ b/Caddyfile @@ -184,3 +184,80 @@ ntfy.lucasroyer.fr { flush_interval -1 } } + +syncthing.lucasroyer.fr { + # Security + header { + X-Frame-Options "SAMEORIGIN" + X-Content-Type-Options "nosniff" + X-XSS-Protection "1; mode=block" + Referrer-Policy "strict-origin-when-cross-origin" + Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" + } + + # Compression + encode zstd gzip + + # Log + log { + output file /data/syncthing_access.log + } + + # Redirect + reverse_proxy syncthing:8384 { + header_up Host {host} + header_up X-Real-IP {remote_host} + } +} + +vaultwarden.lucasroyer.fr { + # Security + header { + X-Frame-Options "SAMEORIGIN" + X-Content-Type-Options "nosniff" + X-XSS-Protection "1; mode=block" + Referrer-Policy "strict-origin-when-cross-origin" + Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" + Permissions-Policy "geolocation=(), microphone=(), camera=()" + } + + # Compression + encode zstd gzip + + # Log + log { + output file /data/vaultwarden_access.log + } + + # Redirect + reverse_proxy vaultwarden:80 { + header_up Host {host} + header_up X-Real-IP {remote_host} + } +} + +motsdepasse.interstices.pro { + # Security + header { + X-Frame-Options "SAMEORIGIN" + X-Content-Type-Options "nosniff" + X-XSS-Protection "1; mode=block" + Referrer-Policy "strict-origin-when-cross-origin" + Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" + Permissions-Policy "geolocation=(), microphone=(), camera=()" + } + + # Compression + encode zstd gzip + + # Log + log { + output file /data/vaultwarden_access.log + } + + # Redirect + reverse_proxy vaultwarden-interstices:80 { + header_up Host {host} + header_up X-Real-IP {remote_host} + } +}