Files
SkyMoney/Caddyfile.dev
Ricearoni1245 079b8b9492
All checks were successful
Deploy / deploy (push) Successful in 1m42s
Security Tests / security-non-db (push) Successful in 20s
Security Tests / security-db (push) Successful in 22s
chore: root commit of OWSAP security testing/tightening
2026-03-01 20:46:47 -06:00

31 lines
627 B
Caddyfile

# Caddyfile.dev — local development (HTTP only)
{
auto_https off
admin off
}
:80 {
# Logs to stdout (handy in `docker compose logs caddy`)
log {
output stdout
format console
}
# Health-check / sanity page for the proxy itself
respond / "caddy ok" 200
# Proxy API: strip /api prefix and forward to the api service on 8080
handle_path /api/* {
reverse_proxy api:8080
}
# Helpful headers, even in dev
header {
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Content-Security-Policy "frame-ancestors 'none'"
Referrer-Policy "strict-origin-when-cross-origin"
}
}