35 lines
785 B
Text
35 lines
785 B
Text
# Caddyfile.example - reverse proxy for clarc
|
|
#
|
|
# Option 1: Tailscale IP restriction (recommended)
|
|
# Only allows connections from Tailscale network (100.64.0.0/10)
|
|
|
|
clarc.yourdomain.com {
|
|
@tailscale remote_ip 100.64.0.0/10
|
|
handle @tailscale {
|
|
reverse_proxy localhost:7200
|
|
}
|
|
respond "Forbidden" 403
|
|
}
|
|
|
|
# Option 2: Basic auth (if you need public access)
|
|
# Generate hash with: caddy hash-password
|
|
|
|
# clarc.yourdomain.com {
|
|
# basicauth {
|
|
# user $2a$14$your_hashed_password_here
|
|
# }
|
|
# reverse_proxy localhost:7200
|
|
# }
|
|
|
|
# Option 3: Both (belt and suspenders)
|
|
|
|
# clarc.yourdomain.com {
|
|
# @tailscale remote_ip 100.64.0.0/10
|
|
# handle @tailscale {
|
|
# basicauth {
|
|
# user $2a$14$your_hashed_password_here
|
|
# }
|
|
# reverse_proxy localhost:7200
|
|
# }
|
|
# respond "Forbidden" 403
|
|
# }
|