From 67508b563ced58686df21fd716e8dc6cce6d237f Mon Sep 17 00:00:00 2001 From: Peter Wood Date: Tue, 6 May 2025 15:09:08 -0400 Subject: [PATCH] Enhance Caddy configuration with global error logging and update reverse proxy settings --- caddy/Caddyfile | 22 ++++++++++++---------- caddy/docker-compose.yml | 1 + 2 files changed, 13 insertions(+), 10 deletions(-) diff --git a/caddy/Caddyfile b/caddy/Caddyfile index 41cc073..83d6a12 100644 --- a/caddy/Caddyfile +++ b/caddy/Caddyfile @@ -1,6 +1,11 @@ { - # debug email peter@peterwood.dev + # Add global error logging with INFO level (captures errors but not debug noise) + log { + output stdout + format console + level INFO + } } ptrwd.com { @@ -51,11 +56,7 @@ home.ptrwd.com { api_token {env.CF_DNS_EDIT} } } - # Debugging: Log all requests - log { - output stdout - format console - } + # Allow connections only from private ranges and home IP using Cf-Connecting-Ip header @allowAccess client_ip 192.168.0.0/16 172.16.0.0/12 10.0.0.0/8 162.203.102.154/32 handle @allowAccess { @@ -103,7 +104,7 @@ radarr.home.ptrwd.com { } } -io.docker.home.ptrwd.com { +io.home.ptrwd.com { tls { dns cloudflare { zone_token {env.CF_ZONE_READ} @@ -120,7 +121,7 @@ io.docker.home.ptrwd.com { } } -europa.docker.home.ptrwd.com { +europa.home.ptrwd.com { tls { dns cloudflare { zone_token {env.CF_ZONE_READ} @@ -130,14 +131,15 @@ europa.docker.home.ptrwd.com { # Allow connections only from private ranges and home IP @allowAccess client_ip 192.168.0.0/16 172.16.0.0/12 10.0.0.0/8 162.203.102.154/32 handle @allowAccess { - reverse_proxy ts-europa.whale-woodpecker.ts.net:5001 + # reverse_proxy ts-europa.whale-woodpecker.ts.net:5001 + reverse_proxy host.docker.internal:5001 } handle { respond 403 } } -racknerd.docker.home.ptrwd.com { +racknerd.home.ptrwd.com { tls { dns cloudflare { zone_token {env.CF_ZONE_READ} diff --git a/caddy/docker-compose.yml b/caddy/docker-compose.yml index 20d8188..7f6c7e6 100644 --- a/caddy/docker-compose.yml +++ b/caddy/docker-compose.yml @@ -14,6 +14,7 @@ services: environment: CF_ZONE_READ: ${CF_ZONE_READ} CF_DNS_EDIT: ${CF_DNS_EDIT} + network_mode: host extra_hosts: - host.docker.internal:host-gateway labels: