74 lines
1.8 KiB
Caddyfile
74 lines
1.8 KiB
Caddyfile
# Managed by Ansible (multica_docker) - local changes will be overwritten
|
|
{% macro tls_block() %}
|
|
{% if caddy_tls_mode == 'internal' %}
|
|
tls internal
|
|
{% elif caddy_tls_mode == 'cloudflare_dns' %}
|
|
tls {
|
|
dns cloudflare {env.CLOUDFLARE_API_TOKEN}
|
|
{% if caddy_dns_resolvers | length > 0 %}
|
|
resolvers {{ caddy_dns_resolvers | join(' ') }}
|
|
{% endif %}
|
|
}
|
|
{% endif %}
|
|
{% endmacro %}
|
|
{
|
|
{% if caddy_acme_email | length > 0 %}
|
|
email {{ caddy_acme_email }}
|
|
{% endif %}
|
|
{% if caddy_http_port | int != 80 %}
|
|
http_port {{ caddy_http_port }}
|
|
{% endif %}
|
|
{% if caddy_https_port | int != 443 %}
|
|
https_port {{ caddy_https_port }}
|
|
{% endif %}
|
|
}
|
|
|
|
{% if multica_layout == 'single' %}
|
|
{{ multica_domain }} {
|
|
{{ tls_block() }} # CLI reachability probe: `multica setup` GETs <server-url>/health and needs a 200
|
|
handle /health {
|
|
reverse_proxy 127.0.0.1:{{ _multica_backend_port }}
|
|
}
|
|
|
|
# Browser realtime WebSocket (the web image cannot proxy WS upgrades)
|
|
handle /ws {
|
|
reverse_proxy 127.0.0.1:{{ _multica_backend_port }} {
|
|
flush_interval -1
|
|
}
|
|
}
|
|
|
|
# Daemon long-connection WebSocket: daemons dial {server-url}/api/daemon/ws
|
|
handle /api/daemon/ws {
|
|
reverse_proxy 127.0.0.1:{{ _multica_backend_port }} {
|
|
flush_interval -1
|
|
}
|
|
}
|
|
|
|
# Everything else goes to the frontend, which forwards API and login requests
|
|
handle {
|
|
reverse_proxy 127.0.0.1:{{ _multica_frontend_port }}
|
|
}
|
|
}
|
|
{% else %}
|
|
{{ multica_app_domain }} {
|
|
{{ tls_block() }} # Hand browser WebSockets straight to the backend
|
|
@ws path /ws /ws/*
|
|
handle @ws {
|
|
reverse_proxy 127.0.0.1:{{ _multica_backend_port }} {
|
|
flush_interval -1
|
|
}
|
|
}
|
|
|
|
# Everything else goes to the frontend, which forwards API and login requests
|
|
handle {
|
|
reverse_proxy 127.0.0.1:{{ _multica_frontend_port }}
|
|
}
|
|
}
|
|
|
|
{{ multica_api_domain }} {
|
|
{{ tls_block() }} reverse_proxy 127.0.0.1:{{ _multica_backend_port }} {
|
|
flush_interval -1
|
|
}
|
|
}
|
|
{% endif %}
|