# cnxvinyl.lol: internal test site on the buildfor.life web server (s1).
# Static web root /var/www/cnxvinyl.lol, filled by
# .gitea/workflows/deploy-site.yml in the cnx_vinyl repo.
#
# Append these blocks to /etc/caddy/Caddyfile on s1, then
#   caddy validate --config /etc/caddy/Caddyfile
#   systemctl reload caddy
# This file mirrors what s1 runs (checked 2026-10-23); keep the two in step.
#
# DNS: the cnxvinyl.lol zone lives in the cnx-network-clan repo
# (modules/dns/zones/cnxvinyl.lol.zone, served by ns1/ns2.cnx.network) and
# points straight at s1, not through Cloudflare. Caddy gets its own
# certificates (HTTP-01/TLS-ALPN on 80/443), so no Cloudflare-only rule.

cnxvinyl.lol {
	header X-Frame-Options "SAMEORIGIN"
	# Internal testing: keep every page and file out of search engines.
	header X-Robots-Tag "noindex, nofollow"

	# Optional login for the whole site. Make the hash on s1 with
	#   caddy hash-password
	# then uncomment and fill in:
	# basic_auth {
	# 	<user> <hash>
	# }

	root * /var/www/cnxvinyl.lol
	encode zstd gzip
	file_server
}

www.cnxvinyl.lol {
	redir https://cnxvinyl.lol{uri} permanent
}