From abf70f777258de8c75aa4a758f0074ed07f3043f Mon Sep 17 00:00:00 2001
From: Olaf Schoenwald <olaf.schoenwald@akquinet.de>
Date: Sat, 12 Sep 2020 10:52:25 +0200
Subject: [PATCH] Adds example for Caddy2 Caddyfile

---
 .DS_Store                 | Bin 0 -> 6148 bytes
 examples/caddy2/Caddyfile | 126 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 126 insertions(+)
 create mode 100644 .DS_Store
 create mode 100644 examples/caddy2/Caddyfile

diff --git a/.DS_Store b/.DS_Store
new file mode 100644
index 0000000000000000000000000000000000000000..7ca3f0dd3376c60b62a895fce41d817aca687d8c
GIT binary patch
literal 6148
zcmeHK%Wl&^6ur~B)JcoT0;yekgT$hWQbCCjLQ2y_5Q&#Cf(4+|uHDp<V@I~r5JFHk
z`~&a@d<tK{hwuS#<^i&uutkW@m1fR7?iqW|9nW}(h_%PwK2eQ`OeBs*71;{o{X8w%
znrhhwGBJirA^B9N6FOb;)(u(#t-!yg0RMKk$f1Z*3Ml{m4timH;)byc557IzLAw4!
z7)nIjbVT>*kRH)J>e2&x46M_Tyb|wAiD!^UF?NWw=*M<SekOL3H+Zuljl`}}_Ww}w
zuhM`Lj68;apU%NdmY(sw#HnD;5qy2*8Mp~ei*F@n{V_M|6%2Qhj+9Pc-BB2%S)=id
zt*sjymo`naYE~~-U)yK##Lk>-oVK0hC9gekvNKnepT%+byX?5n1Ao%5T|J7U%n2et
z5#+%0;qvN55P9*W9gia~730{l!!#>qrC-~f&2Aqw_pF<ZgZZ8{Yc?Aw-?%lOSInJj
z`*(ZC!|B`EyZQT15CX=qZ40}i@E3eWVZ~I>?Ia50Xn<bM+(g)WSO#4z0-L%e>3HCa
z(mjReA$8~>aK%y)OCZnK5CP>!%BtY!Ju6tgK0?TYU#BS+O;~&z#zUWHpnB0w1>fAd
z=tAiEYX!6dOA7G)!9wELQn-*Pwhm<C3IH_FEDUA-v%oo)!j{5?MD)Ozqyi<CsVfGP
zbhKN_ucdGyQPPR2%Lh|WX6lB*#M3dpCESU%B<fr%pcN=8ur8}Le*Sm=eE%<!bWJOu
z75J|dU`EI8v@s=hwk}PMpS2d!F%mcKw~#0($kcHx3j8SEMG}TSix+?`g$s#jf$1Ls
MA%o7e0)JJ3pV=eV$N&HU

literal 0
HcmV?d00001

diff --git a/examples/caddy2/Caddyfile b/examples/caddy2/Caddyfile
new file mode 100644
index 00000000..09b3367e
--- /dev/null
+++ b/examples/caddy2/Caddyfile
@@ -0,0 +1,126 @@
+matrix.DOMAIN.tld {
+
+  tls {$CADDY_TLS}
+
+  @identity {
+        path /_matrix/identity/*
+  }
+
+  @noidentity {
+        not path /_matrix/identity/*
+  }
+
+  @search {
+        path /_matrix/client/r0/user_directory/search/*
+  }
+
+  @nosearch {
+        not path /_matrix/client/r0/user_directory/search/*
+  }
+
+  @static {
+        path /matrix/static-files/*
+  }
+
+  @nostatic {
+        not path /matrix/static-files/*
+  }
+
+  header {
+          Access-Control-Allow-Origin *
+          Strict-Transport-Security "mag=age=31536000;"
+          X-Frame-Options "DENY"
+                                                                                                                                                                                                                      167,9         79%
+          Strict-Transport-Security "mag=age=31536000;"
+          X-Frame-Options "DENY"
+          X-XSS-Protection "1; mode=block"
+  }
+
+  # Cache
+  header @static {
+        # Cache
+    Cache-Control "public, max-age=31536000"
+    defer
+  }
+
+  # identity
+  handle @identity {
+        reverse_proxy localhost:8090/_matrix/identity  {
+               header_up X-Forwarded-Port {http.request.port}
+               header_up X-Forwarded-Proto {http.request.scheme}
+               header_up X-Forwarded-TlsProto {tls_protocol}
+               header_up X-Forwarded-TlsCipher {tls_cipher}
+               header_up X-Forwarded-HttpsProto {proto}
+        }
+  }
+
+  # search
+  handle @search {
+        reverse_proxy localhost:8090/_matrix/client/r0/user_directory/search   {
+               header_up X-Forwarded-Port {http.request.port}
+               header_up X-Forwarded-Proto {http.request.scheme}
+               header_up X-Forwarded-TlsProto {tls_protocol}
+               header_up X-Forwarded-TlsCipher {tls_cipher}
+               header_up X-Forwarded-HttpsProto {proto}
+        }
+  }
+
+  handle {
+        encode zstd gzip
+
+        reverse_proxy localhost:8008  {
+               header_up X-Forwarded-Port {http.request.port}
+               header_up X-Forwarded-Proto {http.request.scheme}
+               header_up X-Forwarded-TlsProto {tls_protocol}
+               header_up X-Forwarded-TlsCipher {tls_cipher}
+               header_up X-Forwarded-HttpsProto {proto}
+        }
+  }
+}
+
+:8448 {
+	handle {
+        	encode zstd gzip
+
+        	reverse_proxy localhost:8448 {
+               		header_up X-Forwarded-Port {http.request.port}
+               		header_up X-Forwarded-Proto {http.request.scheme}
+               		header_up X-Forwarded-TlsProto {tls_protocol}
+               		header_up X-Forwarded-TlsCipher {tls_cipher}
+               		header_up X-Forwarded-HttpsProto {proto}
+        	}
+  	}
+}
+
+dimension.DOMAIN.tld {
+
+        tls {$CADDY_TLS}
+
+    	handle {
+        	encode zstd gzip
+
+        	reverse_proxy localhost:8184  {
+               		header_up X-Forwarded-Port {http.request.port}
+               		header_up X-Forwarded-Proto {http.request.scheme}
+               		header_up X-Forwarded-TlsProto {tls_protocol}
+               		header_up X-Forwarded-TlsCipher {tls_cipher}
+               		header_up X-Forwarded-HttpsProto {proto}
+        	}
+  	}
+}
+
+element.DOMAIN.tld {
+
+        tls {$CADDY_TLS}
+
+        handle {
+              encode zstd gzip
+
+              reverse_proxy localhost:8765 {
+                     header_up X-Forwarded-Port {http.request.port}
+                     header_up X-Forwarded-Proto {http.request.scheme}
+                     header_up X-Forwarded-TlsProto {tls_protocol}
+                     header_up X-Forwarded-TlsCipher {tls_cipher}
+                     header_up X-Forwarded-HttpsProto {proto}
+        }
+}
\ No newline at end of file