OpenSSF Scorecard / Scorecard analysis (push) Waiting to run
CI / Build & test (Node 20) (push) Canceled after 0s
CI / Build & test (Node 24) (push) Canceled after 0s
CI / Build & test (push) Canceled after 0s
CodeQL / Analyze (javascript-typescript) (push) Canceled after 0s
Security / Secret scan (gitleaks) (push) Canceled after 0s
Security / Dependency scan (OSV-Scanner) (push) Canceled after 0s
Security / IaC/config scan (Trivy) (push) Canceled after 0s
Security / License compliance scan (Trivy) (push) Canceled after 0s
The git server runs as its own stack in /opt/gitea and is reached by container name over the app's internal network, publishing no host port of its own. Only the reverse-proxy entry belongs here, where the Caddyfile lives.
19 lines
642 B
Caddyfile
19 lines
642 B
Caddyfile
# Backspace — Caddy reverse proxy configuration
|
|
# DOMAIN is read from the container environment (set via docker-compose.yml)
|
|
|
|
{$DOMAIN} {
|
|
# LiveKit signaling — strip /livekit prefix, forward to host-mode LiveKit
|
|
handle_path /livekit/* {
|
|
reverse_proxy host.docker.internal:7880
|
|
}
|
|
|
|
# Backspace API, WebSocket, and frontend — Docker DNS resolves "backspace"
|
|
reverse_proxy backspace:3000
|
|
}
|
|
|
|
# Gitea — servidor git próprio (stack em /opt/gitea). Alcançado pelo nome do
|
|
# container na rede interna; o Gitea não publica porta nenhuma no host.
|
|
{$GIT_DOMAIN:git.resenha.website} {
|
|
reverse_proxy gitea:3000
|
|
}
|