Logan Cusano
1f5f1fede8
Only drb.cusano.net and api.drb.cusano.net have public A records, so the app.<domain> vhost had no cert to present and the bare domain — the record that actually exists — matched no site at all, producing ERR_SSL_PROTOCOL_ERROR in the browser. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
19 lines
621 B
Caddyfile
19 lines
621 B
Caddyfile
# Managed by Ansible — do not edit manually.
|
|
|
|
api.{{ domain }} {
|
|
reverse_proxy localhost:8888 {
|
|
header_up X-Forwarded-For {remote_host}
|
|
}
|
|
}
|
|
|
|
# Frontend is served on the bare domain, not app.{{ domain }}: only drb and api
|
|
# have public DNS records. A vhost for a name with no A record still starts,
|
|
# but Caddy retries ACME against it forever and logs a failure each time.
|
|
# To move it to app.{{ domain }}, create the A record first, then change this
|
|
# line — the reverse_proxy target stays the same either way.
|
|
{{ domain }} {
|
|
reverse_proxy localhost:3000 {
|
|
header_up X-Forwarded-For {remote_host}
|
|
}
|
|
}
|