105 lines
4.1 KiB
Caddyfile
105 lines
4.1 KiB
Caddyfile
# ==============================================================================
|
|
# 家庭公网 HTTPS 统一反向代理网关 (Mac mini: 10443 端口)
|
|
# 运行方式：macOS System LaunchDaemon (sudo brew services start caddy)
|
|
# 配置文件路径：/opt/homebrew/etc/Caddyfile (与本文件同步)
|
|
# 证书：/Users/ixvii0iv/homelab/stacks/gateway/certs/ (由 acme.sh 自动续签 *.home.961504.xyz)
|
|
# ==============================================================================
|
|
{
|
|
auto_https disable_redirects
|
|
}
|
|
|
|
# 0. 家庭统一导航总入口 HomeLab Console V3 (https://home.961504.xyz:10443)
|
|
home.961504.xyz:10443, nav.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
reverse_proxy 127.0.0.1:3002
|
|
}
|
|
|
|
# 1. 极空间 Z4 NAS (https://z4.home.961504.xyz:10443 或 https://nas.home.961504.xyz:10443)
|
|
nas.home.961504.xyz:10443, z4.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
reverse_proxy 192.168.31.185:5055
|
|
}
|
|
|
|
# 2. 路由器 Mihomo / Clash 面板 (通过 HomeLab SSO 2.0 自定义登录卡片保护)
|
|
clash.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
forward_auth 127.0.0.1:3002 {
|
|
uri /api/auth/verify
|
|
}
|
|
reverse_proxy 192.168.31.1:9999
|
|
}
|
|
|
|
# 3. 小米路由器管理后台 (https://router.home.961504.xyz:10443)
|
|
router.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
forward_auth 127.0.0.1:3002 {
|
|
uri /api/auth/verify
|
|
}
|
|
reverse_proxy 192.168.31.1:80
|
|
}
|
|
|
|
# 4. Lucky 控制台 (https://lucky.home.961504.xyz:10443)
|
|
lucky.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
reverse_proxy 127.0.0.1:16601
|
|
}
|
|
|
|
# 5. AGY 24小时云端 Web 工作台 (https://agy.home.961504.xyz:10443)
|
|
# 使用 forward_auth 对接 HomeLab SSO 2.0 自定义登录卡片，彻底告别浏览器原生丑陋弹窗！
|
|
agy.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
forward_auth 127.0.0.1:3002 {
|
|
uri /api/auth/verify
|
|
}
|
|
reverse_proxy 127.0.0.1:7681
|
|
}
|
|
|
|
# 6. Vaultwarden 私人密码保险箱 (https://vw.home.961504.xyz:10443)
|
|
vw.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
reverse_proxy 127.0.0.1:8222 {
|
|
header_up X-Real-IP {remote_host}
|
|
}
|
|
}
|
|
|
|
# 7. Uptime Kuma 外部独立监控哨兵 (https://status.home.961504.xyz:10443)
|
|
status.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
reverse_proxy 100.115.204.51:3001
|
|
}
|
|
|
|
# 8. Codeg 多智能体协同工作台底座 (https://codeg.home.961504.xyz:10443)
|
|
codeg.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
forward_auth 127.0.0.1:3002 {
|
|
uri /api/auth/verify
|
|
}
|
|
reverse_proxy 127.0.0.1:3080 {
|
|
header_up Authorization "Bearer homelab2026"
|
|
}
|
|
}
|
|
|
|
# 9. Gitea 私有代码托管中枢 (https://git.home.961504.xyz:10443)
|
|
git.home.961504.xyz:10443 {
|
|
tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
|
|
encode zstd gzip
|
|
@browser {
|
|
header Accept *text/html*
|
|
}
|
|
forward_auth @browser 127.0.0.1:3002 {
|
|
uri /api/auth/verify
|
|
}
|
|
reverse_proxy 127.0.0.1:3005 {
|
|
header_up X-Webauth-User admin
|
|
}
|
|
}
|