From 2bd68f0cbce62624ec79350835436afcdfad7471 Mon Sep 17 00:00:00 2001
From: ertopogo <erwin.t.pombett@gmail.com>
Date: Thu, 19 Feb 2026 14:58:03 +0100
Subject: fix: remove Caddy from compose, expose port 3000 (Caddy on araucaria)

---
 Caddyfile | 23 +++++++++++++++++++----
 1 file changed, 19 insertions(+), 4 deletions(-)

(limited to 'Caddyfile')

diff --git a/Caddyfile b/Caddyfile
index 5962313..7ac5e5d 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -1,7 +1,5 @@
-# Remplacer par votre domaine réel
-# En dev local, utiliser: localhost:443
-
-your-domain.com {
+# === Acces internet (TLS auto via Let's Encrypt) ===
+dt.arauco.online {
 	reverse_proxy app:3000
 
 	header {
@@ -22,3 +20,20 @@ your-domain.com {
 		}
 	}
 }
+
+# === Acces reseau local (TLS auto-signe interne) ===
+dt.huitral.ruka.lan {
+	tls internal
+
+	reverse_proxy app:3000
+
+	header {
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "DENY"
+		Referrer-Policy "strict-origin-when-cross-origin"
+		Permissions-Policy "camera=(), microphone=(), geolocation=()"
+		-Server
+	}
+
+	encode gzip zstd
+}
-- 
cgit v1.2.3