Files
SkyMoney/Caddyfile.prod
Ricearoni1245 079b8b9492
All checks were successful
Deploy / deploy (push) Successful in 1m42s
Security Tests / security-non-db (push) Successful in 20s
Security Tests / security-db (push) Successful in 22s
chore: root commit of OWSAP security testing/tightening
2026-03-01 20:46:47 -06:00

31 lines
598 B
Caddyfile

# Caddyfile.prod — production (HTTPS)
{
email admin@skymoneybudget.com
}
skymoneybudget.com {
encode zstd gzip
# Security headers
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Content-Security-Policy "frame-ancestors 'none'"
Referrer-Policy "strict-origin-when-cross-origin"
}
# Serve static SPA
root * /var/www/skymoney/dist
file_server
# SPA fallback
try_files {path} /index.html
# Proxy API
handle_path /api/* {
reverse_proxy 127.0.0.1:8081
}
}