跳到主要内容

caddy

test command​

caddy file-server --root ./public --listen :3000
caddy reverse-proxy --from :8000 --to 127.0.0.1:9000

docker-compose.yml​

version: "3.7"

services:
  caddy:
    image: caddy:alpine
    restart: unless-stopped
    container_name: caddy
    network_mode: "host"
    volumes:
      - ./data/caddy/Caddyfile:/etc/caddy/Caddyfile
      - /etc/caddy/conf.d/:/etc/caddy/conf.d/
      # - ./data/caddy/cert:/data
      - ./data/caddy/dist/:/www/

Caddyfile​

import /etc/caddy/conf.d/*
# auto http to https
# v1:
http:// {
    redir https://{host}{uri} permanent
}
# v2:
:80 {
    redir https://{host}{uri}
}

# 反向代理
news.hjkl01.cn {
    reverse_proxy 127.0.0.1:8000
    reverse_proxy api/* 127.0.0.1:8080

    encode zstd gzip

    header * {
        # cors
        Access-Control-Allow-Origin  *
        Access-Control-Allow-Methods "GET, POST, OPTIONS"
        header_upstream Host {host}
        header_upstream X-Real-IP {remote}
        header_upstream X-Forwarded-For {remote}
        header_upstream X-Forwarded-Proto {scheme}
    }
    # ssl
    # tls /etc/caddy/conf.d/example.com_nginx/example.com_bundle.pem /etc/caddy/conf.d/example.com_nginx/example.com.key
    # tls internal # 生成本地自签名证书用于 HTTPS 调试。
}

# 静态文件
blog.hjkl01.cn {
    root * /data/blog
    templates
    file_server browse
    try_files {path} /index.html
    # try_files {path} {path}.html

    log {
        output file /var/log/caddy/access.log {
            roll_size 1gb
            roll_keep 5
            roll_keep_for 720h
        }
    }
}

# 混合
dev.hjkl01.cn:14567 {

    # 静态文件服务
    root * /data/build

    handle /ws/* {
        reverse_proxy localhost:8080 {
            # WebSocket 支持的关键配置
            transport http {
                keepalive_idle_conns 100
                keepalive_idle_conns_per_host 10
            }
            # 保持连接头
            header_up Connection {http.request.header.Connection}
            header_up Upgrade {http.request.header.Upgrade}
        }
    }

    # API 请求代理到后端
    handle /api/* {
        reverse_proxy localhost:8080
    }

    # SPA 路由支持（可选）
    handle /* {
        try_files {path} {path}/ /index.html
        file_server
    }

    encode zstd gzip
    import cloudflare
}

auth​

caddy hash-password

basicauth /* {
        username output
}

dns.providers.cloudflare​

go install github.com/caddyserver/xcaddy/cmd/xcaddy@latest
xcaddy build --with github.com/caddy-dns/cloudflare
sudo mv caddy /usr/local/bin/

Caddyfile 创建cf令牌​

(cloudflare) {
      tls {
        dns cloudflare token
      }
}
example.com:port {
      reverse_proxy http://localhost:8080
      import cloudflare
}

/etc/systemd/system/caddy.service​

[Unit]
Description=Caddy
Documentation=caddy --help
After=network.target
StartLimitIntervalSec=30
StartLimitBurst=2

[Service]
ExecStart=/usr/local/bin/caddy run --config /etc/caddy/Caddyfile
Restart=always
RestartSec=1

[Install]
Alias=caddy.service
WantedBy=multi-user.target