From 5b4aee69b4c6bf295bc44aad6171e17a0d80e63c Mon Sep 17 00:00:00 2001 From: yyamashita Date: Sat, 11 Jul 2026 20:35:09 +0900 Subject: Dedupe Caddyfile with snippets, sync docs with reality, add tests/check.sh - Caddyfile: extract repeated header blocks into (noindex)/(crawler_bypass) snippets (adapted JSON verified byte-identical to previous config) - CLAUDE.md: add mosquitone-admin/microblog to repos table; document that proxy auth is disabled (PROXY_NO_AUTH=1) with JP-only IP filter instead - Deploy.md/caddy/README.md: reflect all-service deploy and forward proxy - tests/check.sh: shell/python syntax, repos.txt<->hooks<->sessions.txt consistency, app.py COMMANDS vs run-command.sh whitelist, secrets check Co-Authored-By: Claude Opus 4.7 --- caddy/Caddyfile | 32 +++++++++++++++----------------- 1 file changed, 15 insertions(+), 17 deletions(-) (limited to 'caddy/Caddyfile') diff --git a/caddy/Caddyfile b/caddy/Caddyfile index d5624c5..90abecb 100644 --- a/caddy/Caddyfile +++ b/caddy/Caddyfile @@ -2,46 +2,45 @@ order forward_proxy before redir } -golive.yyamashita.com { +(noindex) { header Referrer-Policy "no-referrer" header X-Robots-Tag "noindex, nofollow" +} +(crawler_bypass) { @crawler_bypass header X-Crawler-Access "f9a3c1e847b2d056" header @crawler_bypass -X-Robots-Tag +} +golive.yyamashita.com { + import noindex + import crawler_bypass reverse_proxy tokyo-app:3000 } whoisband.yyamashita.com { - header Referrer-Policy "no-referrer" - header X-Robots-Tag "noindex, nofollow" - - @crawler_bypass header X-Crawler-Access "f9a3c1e847b2d056" - header @crawler_bypass -X-Robots-Tag - + import noindex + import crawler_bypass reverse_proxy whois-app:3000 } + code.yyamashita.com { - header Referrer-Policy "no-referrer" - header X-Robots-Tag "noindex, nofollow" + import noindex reverse_proxy 172.19.0.1:8080 } git.yyamashita.com { - header Referrer-Policy "no-referrer" - header X-Robots-Tag "noindex, nofollow" + import noindex reverse_proxy cgit:80 } hetzner-admin.yyamashita.com { - header Referrer-Policy "no-referrer" - header X-Robots-Tag "noindex, nofollow" + import noindex reverse_proxy hetzner-admin:5000 } blog.yyamashita.com { - header Referrer-Policy "no-referrer" - header X-Robots-Tag "noindex, nofollow" + import noindex reverse_proxy microblog-app:3000 } @@ -51,8 +50,7 @@ vpn.yyamashita.com { tls { key_type rsa4096 } - header Referrer-Policy "no-referrer" - header X-Robots-Tag "noindex, nofollow" + import noindex route /ca.pem { header Content-Type "application/x-pem-file" header Content-Disposition "attachment; filename=\"vpn-ca.pem\"" -- cgit v1.2.3