brianpooe/homelab-blueprint
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: reused pbs parts

Browse source
This commit is contained in:
Brian Pooe 2026-03-08 11:30:44 +02:00
parent d1aee3c645
commit 936b5a43fd
1 changed files with 23 additions and 26 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

49
caddy/Caddyfile_template
View file

@ -40,6 +40,25 @@
Content-Security-Policy default-src 'none'; frame-ancestors 'none'
}
# Shared block for office admin apps with self-signed upstream TLS.
(office-admin-upstream) {
transport http {
tls_insecure_skip_verify
}
header_up Host {upstream_hostport}
}
# Shared security headers for office admin apps.
(office-admin-security) {
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
X-Content-Type-Options "nosniff"
X-Frame-Options "SAMEORIGIN"
Referrer-Policy "no-referrer"
}
encode gzip
}
#### Infrastructure
## 1) LAN services
switchlite8poe.{{CADDY_BASE_DOMAIN:-home.example.com}} {
@ -73,40 +92,18 @@ nas.{{CADDY_BASE_DOMAIN:-home.example.com}} {
pbs.{{CADDY_BASE_DOMAIN:-home.example.com}} {
import common
reverse_proxy {{CADDY_OFFICE_PREFIX:-10.10.0}}.8:8007 {
transport http {
tls_insecure_skip_verify
}
header_up Host {upstream_hostport}
import office-admin-upstream
}
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
X-Content-Type-Options "nosniff"
X-Frame-Options "SAMEORIGIN"
Referrer-Policy "no-referrer"
}
encode gzip
import office-admin-security
}
# Proxmox
proxmox.{{CADDY_BASE_DOMAIN:-home.example.com}} {
import common
reverse_proxy {{CADDY_OFFICE_PREFIX:-10.10.0}}.10:8006 {
transport http {
tls_insecure_skip_verify
}
header_up Host {upstream_hostport}
import office-admin-upstream
}
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
X-Content-Type-Options "nosniff"
X-Frame-Options "SAMEORIGIN"
Referrer-Policy "no-referrer"
}
encode gzip
import office-admin-security
}
#### Synology Media Stack