feat: add pauline ghost and wp

Caddyfile

@@ -413,3 +413,64 @@ csv.lucasroyer.fr {
 	header Content-Type "text/csv; charset=utf-8"
 	header Access-Control-Allow-Origin "*"
 }
+
+ghost.pauline.lucasroyer.fr {
+	# Security
+	header {
+		X-Frame-Options "SAMEORIGIN"
+		X-Content-Type-Options "nosniff"
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		Referrer-Policy "strict-origin-when-cross-origin"
+		X-XSS-Protection "1; mode=block"
+		Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://cdn.jsdelivr.net; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com;"
+	}
+
+	# Compression
+	encode zstd gzip
+
+	# Log
+	log {
+		output file /data/pauline_ghost_access.log
+	}
+
+	# Redirect
+	reverse_proxy ghost:2368
+}
+
+paulinebouillaud.fr {
+	root * /var/www/html
+
+	# Security
+	header {
+		X-Frame-Options "SAMEORIGIN"
+		X-Content-Type-Options "nosniff"
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		Referrer-Policy "strict-origin-when-cross-origin"
+		X-XSS-Protection "1; mode=block"
+		Content-Security-Policy "default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-src 'self' https://*.youtube-nocookie.com https://*.youtube.com https://*.vimeo.com https://*.doubleclick.net; img-src 'self' data: https:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com; frame-ancestors 'self';"
+	}
+
+	# Compression
+	encode zstd gzip
+
+	# Logs
+	log {
+		output file /data/pauline_wordpress_access.log
+	}
+
+	# --- Wordpress FPM ---
+	file_server
+
+	php_fastcgi wordpress-app:9000 {
+		resolve_root_symlink
+	}
+
+	# Security
+	@forbidden {
+		path /xmlrpc.php
+		path /.htaccess
+		path /wp-config.php
+		path /readme.html
+	}
+	respond @forbidden 403
+}