Set up a complete AI services stack with Open WebUI as the main interface, secured behind Caddy reverse proxy with automatic HTTPS via Namecheap DNS challenge. Tailscale integration provides secure remote access. - Configure Open WebUI to connect to Ollama backend - Set up Caddy with Namecheap DNS plugin for wildcard SSL certificates - Add Tailscale for secure networking with health checks - Configure reverse proxy to forward requests to Open WebUI - Enable proper header forwarding for client IP preservation - Set up persistent volumes for data, config, and SSL certificates - Configure JSON logging with rotation for all services
29 lines
663 B
Caddyfile
29 lines
663 B
Caddyfile
{
|
|
email {env.LETSENCRYPT_EMAIL}
|
|
}
|
|
|
|
*.lan.poldebra.me {
|
|
tls {
|
|
dns namecheap {
|
|
api_key {env.NAMECHEAP_API_KEY}
|
|
user {env.NAMECHEAP_API_USER}
|
|
api_endpoint https://api.namecheap.com/xml.response
|
|
}
|
|
resolvers 1.1.1.1 8.8.8.8
|
|
}
|
|
|
|
@ai host ai.lan.poldebra.me
|
|
handle @ai {
|
|
header {
|
|
X-Real-IP {remote_host}
|
|
X-Forwarded-For {remote_host}
|
|
X-Forwarded-Proto {scheme}
|
|
X-Forwarded-Host {host}
|
|
X-Forwarded-Port {server_port}
|
|
}
|
|
reverse_proxy 172.24.0.5:8080 {
|
|
header_up X-Forwarded-Proto {scheme}
|
|
}
|
|
}
|
|
}
|