summaryrefslogtreecommitdiff
path: root/caddy
diff options
context:
space:
mode:
authoryyamashita <yyamashita@hetzner.yyamashita.com>2026-06-30 22:29:07 +0900
committeryyamashita <yyamashita@hetzner.yyamashita.com>2026-06-30 22:29:07 +0900
commit58f7917662ff92a3712289acccff8310c8f1baff (patch)
treecf7290a3eaf0e08c170199ac831f562949785014 /caddy
parent1ad98cc2f9f8a5950aec998a6daacec381cbe2c4 (diff)
Add strongSwan IKEv2 VPN service
- vpn/: Dockerfile, docker-compose.yml, swanctl.conf.tpl, entrypoint.sh - install.sh: Caddy 証明書流用 + コンテナ起動 - renew-cert.sh: 証明書更新 + swanctl ホットリロード - caddy/Caddyfile: vpn.yyamashita.com 追加(Let's Encrypt 証明書取得用) - post-receive: vpn/deploy.sh を追加 - setup-route53.py: WEB_SUBDOMAINS に vpn を追加 Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'caddy')
-rw-r--r--caddy/Caddyfile6
1 files changed, 6 insertions, 0 deletions
diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index 86242b8..66a9d05 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -40,3 +40,9 @@ blog.yyamashita.com {
header X-Robots-Tag "noindex, nofollow"
reverse_proxy microblog-app:3000
}
+
+vpn.yyamashita.com {
+ header Referrer-Policy "no-referrer"
+ header X-Robots-Tag "noindex, nofollow"
+ respond "VPN Server" 200
+}