d14f828aa5
Some checks failed
Deploy Marketing-Site / Build, Test und Deploy (push) Failing after 1m11s
Die Repo-Version war eine 'Wunsch-Version' aus dem Brief mit Logging, Cache-Headers und Status-Page-Auth-Placeholder. Tatsaechlich produktiv laufen die schlanken Bloecke aus diesem Commit, plus ein temporaerer Basic-Auth- Schutz fuer slimcore.io (User: demo / Pass: demo, bcrypt-Hash inline) solange die Site noch im Aufbau ist. Vor Live-Schaltung: basic_auth-Block + X-Robots-Tag-Zeile entfernen, committen, 'docker exec marketing-caddy caddy reload' auf marketing-VPS.
54 lines
1.3 KiB
Caddyfile
54 lines
1.3 KiB
Caddyfile
# Common security headers as snippet
|
|
(security_headers) {
|
|
header {
|
|
Strict-Transport-Security "max-age=31536000; includeSubDomains"
|
|
X-Content-Type-Options nosniff
|
|
Referrer-Policy strict-origin-when-cross-origin
|
|
-Server
|
|
}
|
|
}
|
|
|
|
slimcore.io, www.slimcore.io {
|
|
root * /var/www/slimcore.io
|
|
try_files {path} {path}/ /index.html
|
|
file_server
|
|
encode zstd gzip
|
|
import security_headers
|
|
|
|
# Pre-Launch: Basic-Auth fuer die ganze Site (User: demo / Pass: demo)
|
|
# Entfernen, sobald die Seite oeffentlich gehen soll.
|
|
basic_auth {
|
|
demo $2a$14$FQAC7jJWZnGJzPxNtCIkWOSrYDazfp6/bZR9oNl8IoZmOTh89wF.6
|
|
}
|
|
# Solange die Site nicht oeffentlich ist, soll sie auch nicht indexiert werden:
|
|
header X-Robots-Tag "noindex, nofollow"
|
|
}
|
|
|
|
digiformer.eu, www.digiformer.eu {
|
|
root * /var/www/digiformer.eu
|
|
try_files {path} {path}/ /index.html
|
|
file_server
|
|
encode zstd gzip
|
|
import security_headers
|
|
}
|
|
|
|
slimsafe.io, www.slimsafe.io {
|
|
root * /var/www/slimsafe.io
|
|
try_files {path} {path}/ /index.html
|
|
file_server
|
|
encode zstd gzip
|
|
import security_headers
|
|
}
|
|
|
|
fonboard.io, www.fonboard.io {
|
|
root * /var/www/fonboard.io
|
|
try_files {path} {path}/ /index.html
|
|
file_server
|
|
encode zstd gzip
|
|
import security_headers
|
|
}
|
|
|
|
# Catch-all for unknown hostnames hitting the IP directly
|
|
:80 {
|
|
respond "Not found" 404
|
|
}
|