grabowski
f6829417a0
Deploy test site / deploy (push) Successful in 1m4s
cnxvinyl.lol's zone now lives in cnx-network-clan (ns1/ns2.cnx.network), pointing straight at s1; mail is on mx1. Live once the nameservers at Porkbun are switched. - site/Caddyfile mirrors what s1 runs (checked 2026-10-23): no cloudflare_only or security_headers imports; Caddy gets its own certs. - deploy-site.yml: drop the Cloudflare cache purge step and its secrets. - site/README.md and digital-factory.md: DNS and certificate notes.
35 lines
1.1 KiB
Caddyfile
35 lines
1.1 KiB
Caddyfile
# cnxvinyl.lol: internal test site on the buildfor.life web server (s1).
|
|
# Static web root /var/www/cnxvinyl.lol, filled by
|
|
# .gitea/workflows/deploy-site.yml in the cnx_vinyl repo.
|
|
#
|
|
# Append these blocks to /etc/caddy/Caddyfile on s1, then
|
|
# caddy validate --config /etc/caddy/Caddyfile
|
|
# systemctl reload caddy
|
|
# This file mirrors what s1 runs (checked 2026-10-23); keep the two in step.
|
|
#
|
|
# DNS: the cnxvinyl.lol zone lives in the cnx-network-clan repo
|
|
# (modules/dns/zones/cnxvinyl.lol.zone, served by ns1/ns2.cnx.network) and
|
|
# points straight at s1, not through Cloudflare. Caddy gets its own
|
|
# certificates (HTTP-01/TLS-ALPN on 80/443), so no Cloudflare-only rule.
|
|
|
|
cnxvinyl.lol {
|
|
header X-Frame-Options "SAMEORIGIN"
|
|
# Internal testing: keep every page and file out of search engines.
|
|
header X-Robots-Tag "noindex, nofollow"
|
|
|
|
# Optional login for the whole site. Make the hash on s1 with
|
|
# caddy hash-password
|
|
# then uncomment and fill in:
|
|
# basic_auth {
|
|
# <user> <hash>
|
|
# }
|
|
|
|
root * /var/www/cnxvinyl.lol
|
|
encode zstd gzip
|
|
file_server
|
|
}
|
|
|
|
www.cnxvinyl.lol {
|
|
redir https://cnxvinyl.lol{uri} permanent
|
|
}
|