| @@ -0,0 +1,64 @@ | |||
| 1 | + | apollo.snek.network { | |
| 2 | + | # Everything EXCEPT the Subsonic API requires Authentik SSO. | |
| 3 | + | @protected not path /rest/* | |
| 4 | + | ||
| 5 | + | route { | |
| 6 | + | # Forward outpost traffic directly to Authentik | |
| 7 | + | reverse_proxy /outpost.goauthentik.io/* https://id.snek.network { | |
| 8 | + | header_up Host id.snek.network | |
| 9 | + | header_up X-Real-IP {remote_host} | |
| 10 | + | } | |
| 11 | + | ||
| 12 | + | # Forward auth check — skipped for /rest/* | |
| 13 | + | forward_auth @protected https://id.snek.network { | |
| 14 | + | uri /outpost.goauthentik.io/auth/caddy | |
| 15 | + | header_up X-Real-IP {remote_host} | |
| 16 | + | header_up Host id.snek.network | |
| 17 | + | copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid | |
| 18 | + | trusted_proxies private_ranges | |
| 19 | + | } | |
| 20 | + | ||
| 21 | + | # Your actual app | |
| 22 | + | reverse_proxy :4533 | |
| 23 | + | } | |
| 24 | + | } | |
| 25 | + | ||
| 26 | + | www.iwannabethevery.best, iwannabethevery.best { | |
| 27 | + | @discord header User-Agent "Mozilla/5.0 (compatible; Discordbot/2.0; +https://discordapp.com)" | |
| 28 | + | @notget not method GET | |
| 29 | + | @notroot not path / | |
| 30 | + | ||
| 31 | + | route { | |
| 32 | + | abort @discord # Drop Discord to prevent it from crawling and generating an (incorrect) preview which follow the 302 | |
| 33 | + | abort @notget # Drop everything not GET (usual browser behaviour) | |
| 34 | + | abort @notroot # Drop everything not on root | |
| 35 | + | reverse_proxy :8090 | |
| 36 | + | } | |
| 37 | + | } | |
| 38 | + | ||
| 39 | + | chat.snek.network { | |
| 40 | + | reverse_proxy :9000 | |
| 41 | + | } | |
| 42 | + | ||
| 43 | + | www.cola.tf, cola.tf { | |
| 44 | + | root * /home/cola/http | |
| 45 | + | ||
| 46 | + | handle_errors 404 { | |
| 47 | + | rewrite * /404.html | |
| 48 | + | } | |
| 49 | + | respond /.well-known/atproto-did "did:plc:o2suhoy3k7vt3qffhbkq3xbc" 200 | |
| 50 | + | file_server | |
| 51 | + | } | |
| 52 | + | ||
| 53 | + | www.snek.technology, snek.technology { | |
| 54 | + | root * /home/cola/snek.technology | |
| 55 | + | ||
| 56 | + | handle_errors 404 { | |
| 57 | + | rewrite * /404.html | |
| 58 | + | } | |
| 59 | + | file_server | |
| 60 | + | } | |
| 61 | + | ||
| 62 | + | status.snek.network { | |
| 63 | + | reverse_proxy :3001 | |
| 64 | + | } | |