alice.pds.demo.boltless.dev
This repository has no description
3.1 kB
130 lines
1{
2 # use pinned CA from ./localinfra/certs
3 pki {
4 ca local {
5 name "Tangled Dev"
6 root_cn "Tangled Dev Root"
7 root {
8 format pem_file
9 cert /etc/caddy/certs/root.crt
10 key /etc/caddy/certs/root.key
11 }
12 }
13 }
14}
15
16# did-method-plc
17plc.tngl.boltless.dev {
18 tls internal
19 reverse_proxy plc:8080
20}
21
22# pds
23*.pds.tngl.boltless.dev, pds.tngl.boltless.dev {
24 tls internal
25 reverse_proxy pds:3000
26}
27
28# jetstream
29jetstream.tngl.boltless.dev {
30 tls internal
31 reverse_proxy jetstream:6008
32}
33
34# knot
35knot.tngl.boltless.dev {
36 tls internal
37 reverse_proxy knot:5555
38}
39
40# spindle
41http://spindle.tngl.boltless.dev {
42 reverse_proxy spindle:6555
43}
44
45spindle.tngl.boltless.dev {
46 tls internal
47 reverse_proxy spindle:6555
48}
49
50# knotmirror
51mirror.tngl.boltless.dev {
52 tls internal
53 reverse_proxy knotmirror:7000
54}
55
56# zoekt (internal service)
57zoekt.tngl.boltless.dev {
58 tls internal
59
60 # TODO: replace this with -indexserver_proxy flag
61 handle_path /indexserver/* {
62 reverse_proxy zoekt-tngl-indexserver:6060
63 }
64
65 handle {
66 reverse_proxy zoekt-webserver:6070
67 }
68}
69
70# appview
71tngl.boltless.dev {
72 tls internal
73 reverse_proxy appview:3000
74}
75
76# pdsls
77pdsls.tngl.boltless.dev {
78 tls internal
79 reverse_proxy pdsls:80
80}
81
82# camo and avatar
83camo.tngl.boltless.dev {
84 tls internal
85 reverse_proxy camo:8787
86}
87
88avatar.tngl.boltless.dev {
89 tls internal
90 reverse_proxy avatar:8787
91}
92
93# bobbin (read appview / xrpc). permissive CORS so the web/ frontend in the
94# browser can hit it cross-origin (bobbin serves no CORS headers itself).
95bobbin.tngl.boltless.dev {
96 tls internal
97 @cors_preflight method OPTIONS
98 handle @cors_preflight {
99 header Access-Control-Allow-Origin "*"
100 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
101 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
102 header Access-Control-Max-Age "86400"
103 respond 204
104 }
105 handle {
106 header Access-Control-Allow-Origin "*"
107 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
108 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
109 reverse_proxy bobbin:8090
110 }
111}
112
113# bobbin over plain http on :8090 with permissive CORS, for local web/ dev.
114# bobbin serves no CORS headers itself (prod adds them at its reverse proxy).
115:8090 {
116 @cors_preflight method OPTIONS
117 handle @cors_preflight {
118 header Access-Control-Allow-Origin "*"
119 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
120 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
121 header Access-Control-Max-Age "86400"
122 respond 204
123 }
124 handle {
125 header Access-Control-Allow-Origin "*"
126 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
127 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
128 reverse_proxy bobbin:8090
129 }
130}