alice.pds.demo.boltless.dev
This repository has no description
3.7 kB
143 lines
1{
2 # use pinned CA from ./localinfra/certs
3 pki {
4 ca local {
5 name "Tangled Dev"
6 root_cn "Tangled Dev Root"
7 root {
8 format pem_file
9 cert /etc/caddy/certs/root.crt
10 key /etc/caddy/certs/root.key
11 }
12 }
13 }
14}
15
16# did-method-plc
17plc.tngl.boltless.dev {
18 tls internal
19 reverse_proxy plc:8080
20}
21
22# pds
23*.pds.tngl.boltless.dev, pds.tngl.boltless.dev {
24 tls internal
25 reverse_proxy pds:3000
26}
27
28# jetstream
29jetstream.tngl.boltless.dev {
30 tls internal
31 reverse_proxy jetstream:6008
32}
33
34# knot
35knot.tngl.boltless.dev {
36 tls internal
37 reverse_proxy knot:5555
38}
39
40# spindle
41http://spindle.tngl.boltless.dev {
42 reverse_proxy spindle:6555
43}
44
45spindle.tngl.boltless.dev {
46 tls internal
47 reverse_proxy spindle:6555
48}
49
50# knotmirror
51mirror.tngl.boltless.dev {
52 tls internal
53 @cors_preflight method OPTIONS
54 handle @cors_preflight {
55 header Access-Control-Allow-Origin "*"
56 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
57 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
58 header Access-Control-Max-Age "86400"
59 respond 204
60 }
61 handle {
62 header Access-Control-Allow-Origin "*"
63 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
64 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
65 reverse_proxy knotmirror:7000
66 }
67}
68
69# zoekt (internal service)
70zoekt.tngl.boltless.dev {
71 tls internal
72
73 # TODO: replace this with -indexserver_proxy flag
74 handle_path /indexserver/* {
75 reverse_proxy zoekt-tngl-indexserver:6060
76 }
77
78 handle {
79 reverse_proxy zoekt-webserver:6070
80 }
81}
82
83# appview
84tngl.boltless.dev {
85 tls internal
86 reverse_proxy appview:3000
87}
88
89# pdsls
90pdsls.tngl.boltless.dev {
91 tls internal
92 reverse_proxy pdsls:80
93}
94
95# camo and avatar
96camo.tngl.boltless.dev {
97 tls internal
98 reverse_proxy camo:8787
99}
100
101avatar.tngl.boltless.dev {
102 tls internal
103 reverse_proxy avatar:8787
104}
105
106# bobbin (read appview / xrpc). permissive CORS so the web/ frontend in the
107# browser can hit it cross-origin (bobbin serves no CORS headers itself).
108bobbin.tngl.boltless.dev {
109 tls internal
110 @cors_preflight method OPTIONS
111 handle @cors_preflight {
112 header Access-Control-Allow-Origin "*"
113 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
114 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
115 header Access-Control-Max-Age "86400"
116 respond 204
117 }
118 handle {
119 header Access-Control-Allow-Origin "*"
120 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
121 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
122 reverse_proxy bobbin:8090
123 }
124}
125
126# bobbin over plain http on :8090 with permissive CORS, for local web/ dev.
127# bobbin serves no CORS headers itself (prod adds them at its reverse proxy).
128:8090 {
129 @cors_preflight method OPTIONS
130 handle @cors_preflight {
131 header Access-Control-Allow-Origin "*"
132 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
133 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
134 header Access-Control-Max-Age "86400"
135 respond 204
136 }
137 handle {
138 header Access-Control-Allow-Origin "*"
139 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
140 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
141 reverse_proxy bobbin:8090
142 }
143}