- Add caddy.env to gitignore for sensitive DNS credentials - Replace manual SSL certificates with Let's Encrypt DNS challenge using Namecheap - Build custom Caddy image with namecheap DNS plugin - Configure wildcard SSL for *.lan.poldebra.me domain - Update docker-compose to use custom Caddy build and environment file Note: we had to downgrade to Caddy 2.9, see https://github.com/caddy-dns/namecheap/issues/14 for more information
19 lines
397 B
Caddyfile
19 lines
397 B
Caddyfile
{
|
|
email {env.LETSENCRYPT_EMAIL}
|
|
}
|
|
|
|
*.lan.poldebra.me {
|
|
tls {
|
|
dns namecheap {
|
|
api_key {env.NAMECHEAP_API_KEY}
|
|
user {env.NAMECHEAP_API_USER}
|
|
api_endpoint https://api.namecheap.com/xml.response
|
|
}
|
|
resolvers 1.1.1.1 8.8.8.8
|
|
}
|
|
|
|
@music host music.lan.poldebra.me
|
|
handle @music {
|
|
reverse_proxy 172.20.0.5:4533
|
|
}
|
|
} |