fix #547: secure VM deployment behind HTTPS proxy

2026-06-28 23:03:32 +09:00
parent e63b3af653
commit 8dc77f87ab
12 changed files with 818 additions and 3 deletions
--- a/deploy/caddy/Caddyfile.template
+++ b/deploy/caddy/Caddyfile.template
@@ -0,0 +1,17 @@
+{
+	email {{TLS_EMAIL}}
+}
+
+{{PUBLIC_HOST}} {
+	encode zstd gzip
+	{{TLS_OPTIONS}}
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains"
+		X-Content-Type-Options "nosniff"
+		Referrer-Policy "same-origin"
+		-Server
+	}
+
+	reverse_proxy 127.0.0.1:{{APP_PORT}}
+}