bcdc0c6cef
WireGuard for private service access (kobodl behind VPN). kobodl downloads and de-DRMs Kobo store purchases. calibre-web serves the library at books.monotrope.au. sync.sh script handles ongoing download + import workflow. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
90 lines
1.8 KiB
Caddyfile
90 lines
1.8 KiB
Caddyfile
monotrope.au {
|
|
root * /var/www/monotrope
|
|
file_server
|
|
|
|
# Security headers
|
|
header {
|
|
X-Content-Type-Options "nosniff"
|
|
X-Frame-Options "DENY"
|
|
Referrer-Policy "strict-origin-when-cross-origin"
|
|
Permissions-Policy "camera=(), microphone=(), geolocation=()"
|
|
}
|
|
|
|
# Compression
|
|
encode zstd gzip
|
|
|
|
# Cache headers for static assets
|
|
@static {
|
|
path *.css *.js *.ico *.gif *.jpg *.jpeg *.png *.webp *.svg *.woff *.woff2 *.ttf *.eot
|
|
}
|
|
header @static Cache-Control "public, max-age=31536000, immutable"
|
|
|
|
# HTML and RSS — revalidate each time
|
|
@html {
|
|
path *.html / /posts/ /posts/*
|
|
}
|
|
header @html Cache-Control "public, max-age=0, must-revalidate"
|
|
|
|
|
|
}
|
|
|
|
# Redirect www to apex
|
|
www.monotrope.au {
|
|
redir https://monotrope.au{uri} permanent
|
|
}
|
|
|
|
# Miniflux RSS reader
|
|
reader.monotrope.au {
|
|
reverse_proxy localhost:8080
|
|
|
|
header {
|
|
X-Content-Type-Options "nosniff"
|
|
X-Frame-Options "DENY"
|
|
Referrer-Policy "strict-origin-when-cross-origin"
|
|
Permissions-Policy "camera=(), microphone=(), geolocation=()"
|
|
}
|
|
|
|
encode zstd gzip
|
|
}
|
|
|
|
# Gitea
|
|
git.monotrope.au {
|
|
reverse_proxy localhost:3000
|
|
|
|
header {
|
|
X-Content-Type-Options "nosniff"
|
|
Referrer-Policy "strict-origin-when-cross-origin"
|
|
Permissions-Policy "camera=(), microphone=(), geolocation=()"
|
|
}
|
|
|
|
encode zstd gzip
|
|
}
|
|
|
|
# Calibre-web
|
|
books.monotrope.au {
|
|
reverse_proxy localhost:8083
|
|
|
|
header {
|
|
X-Content-Type-Options "nosniff"
|
|
X-Frame-Options "DENY"
|
|
Referrer-Policy "strict-origin-when-cross-origin"
|
|
Permissions-Policy "camera=(), microphone=(), geolocation=()"
|
|
}
|
|
|
|
encode zstd gzip
|
|
}
|
|
|
|
# GoatCounter analytics
|
|
stats.monotrope.au {
|
|
reverse_proxy localhost:8081
|
|
|
|
header {
|
|
X-Content-Type-Options "nosniff"
|
|
X-Frame-Options "DENY"
|
|
Referrer-Policy "strict-origin-when-cross-origin"
|
|
Permissions-Policy "camera=(), microphone=(), geolocation=()"
|
|
}
|
|
|
|
encode zstd gzip
|
|
}
|