From 1a7b5adf8484ec0f2b6feb350b578142e186ab26 Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Thu, 2 Jul 2026 23:08:58 +0900
Subject: Move forward proxy from Squid to Caddy (port 80/443)

Replace standalone Squid container with caddy-forwardproxy plugin so the
proxy shares Caddy's existing ports and TLS. HTTP on :80 and HTTPS on :443.
Auth is read from the same vpn/users.conf at Caddy startup via entrypoint.sh.
DNS: add proxy to setup-route53.py WEB_SUBDOMAINS.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 caddy/Caddyfile | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

(limited to 'caddy/Caddyfile')

diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index 5ab87a7..3cf3547 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -41,12 +41,7 @@ blog.yyamashita.com {
     reverse_proxy microblog-app:3000
 }
 
-proxy.yyamashita.com {
-    tls {
-        key_type rsa4096
-    }
-    respond "Proxy Server" 200
-}
+import /tmp/proxy_forward.caddy
 
 vpn.yyamashita.com {
     tls {
-- 
cgit v1.2.3