16 lines
449 B
Caddyfile
16 lines
449 B
Caddyfile
# Example Caddyfile site block for the zeitkort web app.
|
|
# Caddy handles TLS automatically via Let's Encrypt.
|
|
#
|
|
# Access control is done HERE (the app itself has no login screen): only the
|
|
# listed IPs/ranges reach it. Everyone else gets 403.
|
|
|
|
zeit.example.com {
|
|
@allowed remote_ip 203.0.113.4 198.51.100.0/24
|
|
handle @allowed {
|
|
reverse_proxy 127.0.0.1:8081
|
|
}
|
|
respond "Forbidden" 403
|
|
}
|
|
|
|
# This web-only POC has no separate API/backend service.
|