homelab

/

stacks

/

gateway

/

or Cancel

Edit File Preview Preview Changes

Spaces Tabs

2 4 8

Wrap No wrap

# ============================================================================== # 家庭公网 HTTPS 统一反向代理网关 (Mac mini: 10443 端口) # 运行方式：macOS System LaunchDaemon (sudo brew services start caddy) # 配置文件路径：/opt/homebrew/etc/Caddyfile (与本文件同步) # 证书：/Users/ixvii0iv/homelab/stacks/gateway/certs/ (由 acme.sh 自动续签 *.home.961504.xyz) # ============================================================================== { auto_https disable_redirects } # 0. 家庭统一导航总入口 HomeLab Console V3 (https://home.961504.xyz:10443) home.961504.xyz:10443, nav.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip reverse_proxy 127.0.0.1:3002 } # 1. 极空间 Z4 NAS (https://z4.home.961504.xyz:10443 或 https://nas.home.961504.xyz:10443) nas.home.961504.xyz:10443, z4.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip reverse_proxy 192.168.31.185:5055 } # 2. 路由器 Mihomo / Clash 面板 (通过 HomeLab SSO 2.0 自定义登录卡片保护) clash.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip forward_auth 127.0.0.1:3002 { uri /api/auth/verify } reverse_proxy 192.168.31.1:9999 } # 3. 小米路由器管理后台 (https://router.home.961504.xyz:10443) router.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip forward_auth 127.0.0.1:3002 { uri /api/auth/verify } reverse_proxy 192.168.31.1:80 } # 4. Lucky 控制台 (https://lucky.home.961504.xyz:10443) lucky.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip reverse_proxy 127.0.0.1:16601 } # 5. AGY 24小时云端 Web 工作台 (https://agy.home.961504.xyz:10443) # 使用 forward_auth 对接 HomeLab SSO 2.0 自定义登录卡片，彻底告别浏览器原生丑陋弹窗！ agy.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip forward_auth 127.0.0.1:3002 { uri /api/auth/verify } reverse_proxy 127.0.0.1:7681 } # 6. Vaultwarden 私人密码保险箱 (https://vw.home.961504.xyz:10443) vw.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip reverse_proxy 127.0.0.1:8222 { header_up X-Real-IP {remote_host} } } # 7. Uptime Kuma 外部独立监控哨兵 (https://status.home.961504.xyz:10443) status.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip reverse_proxy 100.115.204.51:3001 } # 8. Codeg 多智能体协同工作台底座 (https://codeg.home.961504.xyz:10443) codeg.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip forward_auth 127.0.0.1:3002 { uri /api/auth/verify } reverse_proxy 127.0.0.1:3080 { header_up Authorization "Bearer homelab2026" } } # 9. Gitea 私有代码托管中枢 (https://git.home.961504.xyz:10443) git.home.961504.xyz:10443 { tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem encode zstd gzip @browser { header Accept *text/html* } forward_auth @browser 127.0.0.1:3002 { uri /api/auth/verify } reverse_proxy 127.0.0.1:3005 { header_up X-Webauth-User admin } }

Commit Changes

Add a Signed-off-by trailer by the committer at the end of the commit log message.

Commit directly to the main branch.

Create a new branch for this commit and start a pull request.

Commit Changes Cancel