This commit is contained in:
traveler 2024-12-27 13:01:49 -06:00
parent 3ac1152586
commit 7a60db0b7b
2 changed files with 68 additions and 26 deletions

49
Caddyfile Executable file → Normal file
View file

@ -1,45 +1,42 @@
dns.netgrimoire.com {
reverse_proxy 192.168.5.7:5380/
}
reverse_proxy 192.168.5.7:5380
}
webtop.netgrimoire.com {
reverse_proxy http://webtop:3000
}
reverse_proxy http://webtop:3000
}
(mailcow-proxy) {
reverse_proxy mailcow-nginx:80
}
mail.netgrimoire.com, imap.netgrimoire.com, smtp.netgrimoire.com, autodiscover.netgrimoire.com, autoconfig.netgrimoire.com {
reverse_proxy mailcow-nginx:80
import mailcow-proxy
}
mail.wasted-bandwidth.net, imap.wasted-bandwidth.net, smtp.wasted-bandwidth.net, autodiscover.wasted-bandwidth.net, autoconfig.wasted-bandwidth.net {
reverse_proxy mailcow-nginx:80
import mailcow-proxy
}
mail.gnarlypandaproductions.com, imap.gnarlypandaproductions.com, smtp.gnarlypandaproductions.com, autodiscover.gnarlypandaproductions.com, autoconfig.gnarlypandaproductions.com {
reverse_proxy mailcow-nginx:80
import mailcow-proxy
}
(email-proxy) {
reverse_proxy mailcow-nginx:80/sogo
}
email.gnarlypandaproductions.com, email.netgrimoire.com, email.wasted-bandwidth.net {
reverse_proxy mailcow-nginx:80/sogo/
import email-proxy
}
(authentik) {
route /outpost.goauthentik.io/* {
reverse_proxy http://authentik:9000
}
(authentik) {
# Always forward outpost path to actual outpost
reverse_proxy /outpost.goauthentik.io/* http://authentik:9000
# Forward authentication to outpost
forward_auth http://authentik:9000 {
uri /outpost.goauthentik.io/auth/caddy
# Capitalization of the headers is important, otherwise they will be empty
copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
}
}
forward_auth http://authentik:9000 {
uri /outpost.goauthentik.io/auth/caddy
copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
}
}

45
Caddyfile.old Executable file
View file

@ -0,0 +1,45 @@
dns.netgrimoire.com {
reverse_proxy 192.168.5.7:5380/
}
webtop.netgrimoire.com {
reverse_proxy http://webtop:3000
}
mail.netgrimoire.com, imap.netgrimoire.com, smtp.netgrimoire.com, autodiscover.netgrimoire.com, autoconfig.netgrimoire.com {
reverse_proxy mailcow-nginx:80
}
mail.wasted-bandwidth.net, imap.wasted-bandwidth.net, smtp.wasted-bandwidth.net, autodiscover.wasted-bandwidth.net, autoconfig.wasted-bandwidth.net {
reverse_proxy mailcow-nginx:80
}
mail.gnarlypandaproductions.com, imap.gnarlypandaproductions.com, smtp.gnarlypandaproductions.com, autodiscover.gnarlypandaproductions.com, autoconfig.gnarlypandaproductions.com {
reverse_proxy mailcow-nginx:80
}
email.gnarlypandaproductions.com, email.netgrimoire.com, email.wasted-bandwidth.net {
reverse_proxy mailcow-nginx:80/sogo/
}
(authentik) {
# Always forward outpost path to actual outpost
reverse_proxy /outpost.goauthentik.io/* http://authentik:9000
# Forward authentication to outpost
forward_auth http://authentik:9000 {
uri /outpost.goauthentik.io/auth/caddy
# Capitalization of the headers is important, otherwise they will be empty
copy_headers X-Authentik-Username X-Authentik-Groups X-Authentik-Email X-Authentik-Name X-Authentik-Uid X-Authentik-Jwt X-Authentik-Meta-Jwks X-Authentik-Meta-Outpost X-Authentik-Meta-Provider X-Authentik-Meta-App X-Authentik-Meta-Version
}
}