1 files changed, 19 insertions, 4 deletions

diff --git a/Caddyfile b/Caddyfile
index 5962313..7ac5e5d 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -1,7 +1,5 @@
-# Remplacer par votre domaine réel
-# En dev local, utiliser: localhost:443
-
-your-domain.com {
+# === Acces internet (TLS auto via Let's Encrypt) ===
+dt.arauco.online {
 	reverse_proxy app:3000
 
 	header {
@@ -22,3 +20,20 @@ your-domain.com {
 		}
 	}
 }
+
+# === Acces reseau local (TLS auto-signe interne) ===
+dt.huitral.ruka.lan {
+	tls internal
+
+	reverse_proxy app:3000
+
+	header {
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "DENY"
+		Referrer-Policy "strict-origin-when-cross-origin"
+		Permissions-Policy "camera=(), microphone=(), geolocation=()"
+		-Server
+	}
+
+	encode gzip zstd
+}