Add reverse proxy SSL guides for Caddy, Nginx, and Traefik.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-29 03:55:37 +03:00
parent b1e31430b5
commit 93bbbf8ce8
12 changed files with 434 additions and 1 deletions
@@ -0,0 +1,28 @@
+{$DOMAIN:panel.example.com} {
+	encode gzip zstd
+
+	# Healthcheck без редиректов наружу
+	handle /health {
+		reverse_proxy app:8080
+	}
+
+	reverse_proxy app:8080 {
+		header_up X-Real-IP {remote_host}
+		header_up X-Forwarded-For {remote_host}
+		header_up X-Forwarded-Proto {scheme}
+		header_up Host {host}
+	}
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		X-Content-Type-Options nosniff
+		X-Frame-Options DENY
+		Referrer-Policy strict-origin-when-cross-origin
+		-Server
+	}
+
+	log {
+		output stdout
+		format console
+	}
+}