alice.pds.demo.boltless.dev
This repository has no description
3.2 kB
134 lines
1{
2 # use pinned CA from ./localinfra/certs
3 pki {
4 ca local {
5 name "Tangled Dev"
6 root_cn "Tangled Dev Root"
7 root {
8 format pem_file
9 cert /etc/caddy/certs/root.crt
10 key /etc/caddy/certs/root.key
11 }
12 }
13 }
14}
15
16# did-method-plc
17plc.tngl.boltless.dev {
18 tls internal
19 reverse_proxy plc:8080
20}
21
22# pds
23*.pds.tngl.boltless.dev, pds.tngl.boltless.dev {
24 tls internal
25 reverse_proxy pds:3000
26}
27
28# jetstream
29jetstream.tngl.boltless.dev {
30 tls internal
31 reverse_proxy jetstream:6008
32}
33
34# knot
35http://knot.tngl.boltless.dev {
36 reverse_proxy knot:5555
37}
38
39knot.tngl.boltless.dev {
40 tls internal
41 reverse_proxy knot:5555
42}
43
44# spindle
45http://spindle.tngl.boltless.dev {
46 reverse_proxy spindle:6555
47}
48
49spindle.tngl.boltless.dev {
50 tls internal
51 reverse_proxy spindle:6555
52}
53
54# knotmirror
55mirror.tngl.boltless.dev {
56 tls internal
57 reverse_proxy knotmirror:7000
58}
59
60# zoekt (internal service)
61zoekt.tngl.boltless.dev {
62 tls internal
63
64 # TODO: replace this with -indexserver_proxy flag
65 handle_path /indexserver/* {
66 reverse_proxy zoekt-tngl-indexserver:6060
67 }
68
69 handle {
70 reverse_proxy zoekt-webserver:6070
71 }
72}
73
74# appview
75tngl.boltless.dev {
76 tls internal
77 reverse_proxy appview:3000
78}
79
80# pdsls
81pdsls.tngl.boltless.dev {
82 tls internal
83 reverse_proxy pdsls:80
84}
85
86# camo and avatar
87camo.tngl.boltless.dev {
88 tls internal
89 reverse_proxy camo:8787
90}
91
92avatar.tngl.boltless.dev {
93 tls internal
94 reverse_proxy avatar:8787
95}
96
97# bobbin (read appview / xrpc). permissive CORS so the web/ frontend in the
98# browser can hit it cross-origin (bobbin serves no CORS headers itself).
99bobbin.tngl.boltless.dev {
100 tls internal
101 @cors_preflight method OPTIONS
102 handle @cors_preflight {
103 header Access-Control-Allow-Origin "*"
104 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
105 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
106 header Access-Control-Max-Age "86400"
107 respond 204
108 }
109 handle {
110 header Access-Control-Allow-Origin "*"
111 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
112 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
113 reverse_proxy bobbin:8090
114 }
115}
116
117# bobbin over plain http on :8090 with permissive CORS, for local web/ dev.
118# bobbin serves no CORS headers itself (prod adds them at its reverse proxy).
119:8090 {
120 @cors_preflight method OPTIONS
121 handle @cors_preflight {
122 header Access-Control-Allow-Origin "*"
123 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
124 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
125 header Access-Control-Max-Age "86400"
126 respond 204
127 }
128 handle {
129 header Access-Control-Allow-Origin "*"
130 header Access-Control-Allow-Methods "GET, POST, OPTIONS"
131 header Access-Control-Allow-Headers "Content-Type, authorization, atproto-proxy"
132 reverse_proxy bobbin:8090
133 }
134}