Part of #980. Part of #1199.
Add a Caddy reverse proxy service to the compose stack so operators get HTTPS + HTTP/3 + auto-renewing Let's Encrypt certificates without any manual cert management.
Scope:
caddy:2-alpine in the caddy compose profile (ports 80/443 TCP + 443 UDP for QUIC)caddy/Caddyfile — {$DOMAIN} site block with reverse_proxy gittensory:8787- Security headers: HSTS, X-Content-Type-Options, X-Frame-Options, Referrer-Policy
- Zstd + gzip compression
DOMAIN env var in .env.example; Terraform firewall already opens 80/443/443udp
Part of #980. Part of #1199.
Add a Caddy reverse proxy service to the compose stack so operators get HTTPS + HTTP/3 + auto-renewing Let's Encrypt certificates without any manual cert management.
Scope:
caddy:2-alpinein thecaddycompose profile (ports 80/443 TCP + 443 UDP for QUIC)caddy/Caddyfile—{$DOMAIN}site block withreverse_proxy gittensory:8787DOMAINenv var in.env.example; Terraform firewall already opens 80/443/443udp