john/Prod
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Upload files to "caddy"

Browse Source 
Latest working with Authelia
This commit is contained in:
John Anderson
2026-06-13 12:23:10 +01:00
parent 3b4b8f1b36
commit f846768a54
1 changed files with 105 additions and 83 deletions
Download Patch File Download Diff File Expand all files Collapse all files
caddy/Caddyfile
+101 -79
View File
@@ -2,7 +2,7 @@
{ {
# Global options, omly one such block at the head of the file # Global options, omly one such block at the head of the file
servers { servers {
trusted_proxies static 192.168.1.0/24 2a00:23c6::/32 trusted_proxies static 192.168.1.0/24 10.0.0.0/24 2a00:23c6::/32
} }
# make admin available to all trusted nodes on the network # make admin available to all trusted nodes on the network
admin :2019 admin :2019
@@ -11,10 +11,10 @@
# #
# #
# For Authelis # For Authelia
# #
(trusted_proxy_list) { (trusted_proxy_list) {
trusted_proxies 192.168.1.0/24 2a00:23c6::/32 trusted_proxies 192.168.1.0/24 10.0.0.0/24 2a00:23c6::/32
} }
(secure_site) { (secure_site) {
@@ -37,7 +37,7 @@
# #
(basic-auth) { (basic-auth) {
basic_auth { basic_auth {
john.anderson $2a$10$T.yetVs9CmektYsaU8RqYu37fVaFAsPDLf90lsDDfxLkaC.zWH3Oi john.anderson $2a$10$4ka55bXqNBpoQcBDrJtd5OQje6Nt/HmvRNAGavqO03xq/Noth5xH.
mary.anderson $2a$10$UOuB5DpDcKRho0rRPDCmCeFlDSx/f6Bkwqpw8CEeQCbAGA0yULcny mary.anderson $2a$10$UOuB5DpDcKRho0rRPDCmCeFlDSx/f6Bkwqpw8CEeQCbAGA0yULcny
frazer.anderson $2a$10$UleGw5O0BB18XtSenFSawudO.qKbNVMFU772XMP4cAAUbWzRo/zr6 frazer.anderson $2a$10$UleGw5O0BB18XtSenFSawudO.qKbNVMFU772XMP4cAAUbWzRo/zr6
chris.anderson $2a$10$1MeL9m8M7FW/k6/DW3HB1.rkijS3qao8RraNO/tJKN8OuRTCzc3fK chris.anderson $2a$10$1MeL9m8M7FW/k6/DW3HB1.rkijS3qao8RraNO/tJKN8OuRTCzc3fK
@@ -55,9 +55,10 @@
barbara.wright $2a$10$Mlp0Y2wPzzomL1EnTInS2u18yv7ksMY.ATURzQz4luRRe2JwBMEJS barbara.wright $2a$10$Mlp0Y2wPzzomL1EnTInS2u18yv7ksMY.ATURzQz4luRRe2JwBMEJS
janet.kennedy $2a$10$/8VCpm68CLSF2zSL5sHtR.hzwJ.h3cX3r8XHogHbz8o7KIYPDHOVW janet.kennedy $2a$10$/8VCpm68CLSF2zSL5sHtR.hzwJ.h3cX3r8XHogHbz8o7KIYPDHOVW
} }
# respond "Welcome, {http.auth.user.id}" 200
} }
# #
# Authelia from HOSTS # tinyauth running on LXC
# #
auth.johnsnexus.click { auth.johnsnexus.click {
reverse_proxy 192.168.1.1:9091 { reverse_proxy 192.168.1.1:9091 {
@@ -67,9 +68,9 @@ auth.johnsnexus.click {
# #
# Locally hosted site # Locally hosted site
# #
testcaddy.johnsnexus.click { testcaddy.home.johnsnexus.click {
root * /usr/share/caddy # compose file points to this root * /usr/share/caddy # compose file points to this
php_fastcgi 192.168.1.1:80 php_fastcgi 192.168.1.11:80
file_server file_server
} }
# #
@@ -88,19 +89,19 @@ https://hold.johnsnexus.click {
reverse_proxy 192.168.1.5:1411 reverse_proxy 192.168.1.5:1411
} }
# #
# Test GHOST site on ELITE cluster # Test GHOST site on BETA
# #
ghost.johnsnexus.click { #ghost.johnsnexus.click {
root * /var/www/mymag # root * /var/www/mymag
file_server # file_server
reverse_proxy 192.168.1.4:2368 # reverse_proxy 192.168.1.9:2368
} #}
# #
# Fanily History Web site on Production cluster system, come here via HOSTS file # Fanily History Web site on Production cluster system, come here via BIND9
# #
nextfamhistweb.johnsnexus.click { nextfamhistweb.johnsnexus.click {
# import basic-auth # import basic-auth
import secure_site * # import secure_site *
# root * /usr/local/apache2/htdocs # root * /usr/local/apache2/htdocs
# file_server # file_server
reverse_proxy nextfamhistweb_nextfamhistweb { reverse_proxy nextfamhistweb_nextfamhistweb {
@@ -108,61 +109,87 @@ nextfamhistweb.johnsnexus.click {
} }
} }
# #
# Test web site on Production Cluster, come here via HOSTS file # Test web site on Production Cluster, come here via BIND9
# an example of a non-secure site on a different domain
# #
http://northweb.johns.study { northweb.home.johnsnexus.click {
import basic-auth import secure_site *
root * /usr/local/apache2/htdocs # import basic-auth
file_server file_server
reverse_proxy testweb_testweb reverse_proxy testweb_testweb
} }
# #
# Test version of paperless-ngx on Elite cluster, come here via HOSTS file # Test version of paperless-ngx on OMEGA come here via BIND9
# #
wastebin.johnsnexus.click { wastebin.johnsnexus.click {
file_server file_server
reverse_proxy 192.168.1.4:8600 reverse_proxy 192.168.1.5:8600
} }
# #
# Version of pydio cells on NODE-16 using SAMBA volume - DYNU public address # Version of pydio cells on NODE-16 using SAMBA volume - DYNU public address
# #
pydiocells.johnsnexus.click { #pydiocells.johnsnexus.click {
# tls tls@johnsnexus.click # tls tls@johnsnexus.click
reverse_proxy 192.168.1.4:8888 { # reverse_proxy 192.168.1.4:8888 {
transport http { # transport http {
tls # tls
tls_insecure_skip_verify # tls_insecure_skip_verify
} # }
} # }
} #}
# #
# Nextcloud AIO on NODE-16, was Beta (220 or 9) # NEXTCLOUDAIO on virtual node 22, via DYNU
# #
https://amudanan.johnsnexus.click:443 { amudanan.johnsnexus.click {
header Strict-Transport-Security max-age=15552000
file_server file_server
reverse_proxy http://192.168.1.16:11000 reverse_proxy 192.168.1.22:11000
} }
# #
# OWNCLOUD on BEES swarm via DYNU #codeamud.johnsnexus.click {
# file_server
# reverse_proxy 192.168.1.26:9980 {
# header_up X-Forwarded-Proto {scheme}
# transport http {
# tls_insecure_skip_verify
# }
# }
#}
#
# OWNCLOUD on vmnode21
# #
mycloud.johnsnexus.click { mycloud.johnsnexus.click {
header Strict-Transport-Security max-age=15552000 header Strict-Transport-Security max-age=15552000
file_server file_server
reverse_proxy 192.168.1.3:8080 reverse_proxy 192.168.1.21:8080
} }
# #
code.johnsnexus.click { code.johnsnexus.click {
encode gzip
file_server file_server
reverse_proxy https://192.168.1.3:9980 { reverse_proxy 192.168.1.21:9980 {
transport http { header_up X-Forwarded-Proto {scheme}
tls_insecure_skip_verify # transport http {
} # tls_insecure_skip_verify
# }
} }
} }
# #
# TESTCLOUD/Nextcloud Alpine on ZETA
#testcloud.johnsnexus.click {
# file_server
# reverse_proxy 192.168.1.26
#}
#
# TESTCLOUD/nextcloud-alpine in a secure LXC on ZETA
#
#testcloud.home.johnsnexus.click {
# header Strict-Transport-Security max-age=15552000
# file_server
# reverse_proxy https://192.168.1.232:443 {
# transport http {
# tls_insecure_skip_verify
# }
# }
#}
#
# Vaultwarden on Production Cluster, come here via HOSTS # Vaultwarden on Production Cluster, come here via HOSTS
# #
#warden.johnsnexus.click { #warden.johnsnexus.click {
@@ -178,60 +205,55 @@ https://chord.johnsnexus.click {
## ##
# n8n running on DELTA, come here via DYNU # n8n running on DELTA, come here via DYNU
# #
donut.johnsnexus.click { #donut.johnsnexus.click {
reverse_proxy http://192.168.1.10:5678 { # reverse_proxy http://192.168.1.10:5678 {
flush_interval -1 # flush_interval -1
} # }
} #}
# #
# CTiO magazine using Ghost on production # CTiO magazine using NICEPAGE on PROXMOX
# #
ctio.johnsnexus.click { ctio.johnsnexus.click {
file_server file_server
reverse_proxy 192.168.1.1:2368 reverse_proxy ctiomag_ctiomag
} }
# #
#**************************************** #****************************************
# #
# Hoarder from hosts file, keep in extenal domain # Needs SSL;
# Needs SSL; leave as explicit address; use 3200 as gitea uses 3000
# #
hoarder.johnsnexus.click { https://hoarder.home.johnsnexus.click {
reverse_proxy 192.168.1.4:3200
}
#
# # although "prod" it runs on Elite Cluster
grafana.johnsnexus.click {
# file_server
reverse_proxy 192.168.1.4:3030
}
# new gitea on elite cluster
mygit.johnsnexus.click {
reverse_proxy 192.168.1.4:3000
}
#
# copy of mygit on the production cluster
gitea.johnsnexus.click {
file_server file_server
reverse_proxy 192.168.1.1:3000 reverse_proxy 192.168.1.234:3000
} }
# #
gotify.johnsnexus.click { # runs on virtual LXC
reverse_proxy 192.168.1.4:8111 #
https://grafana.home.johnsnexus.click {
file_server
reverse_proxy 192.168.1.237:3000
} }
# #
# Portainer manageed on ELITE cluster, come here via HOSTS # runs on virtual LXC
# Use port 9000 not 9443 lldap.home.johnsnexus.click {
portainer.johnsnexus.click { file_server
reverse_proxy 192.168.1.4:9000 reverse_proxy 192.168.1.26:17170
} }
# #
# Open Media Vault from HOSTS file # copy of mygit on the proxmox cluster
# gitea.home.johnsnexus.click {
omv.valhalla.johnsnexus.click { file_server
reverse_proxy 192.168.1.7 reverse_proxy 192.168.1.235:3000
} }
# #
omv.paradise.johnsnexus.click { # now a cirtual container on PROXMOX
reverse_proxy 192.168.1.8 gotify.home.johnsnexus.click {
reverse_proxy 192.168.1.230:80
} }
#
# New home assistant, running under docker on NODE-16 via wireless
https://have.johnsnexus.click {
file_server
reverse_proxy 192.168.1.16:8123
}