From c39ec05968656aaa893ed7e4b20b7d5f5ccbe5b5 Mon Sep 17 00:00:00 2001
From: yyamashita <yyamashita@hetzner.yyamashita.com>
Date: Fri, 3 Jul 2026 00:40:17 +0900
Subject: Add GeoIP Japan-only filter to forward proxy

Uses caddy-maxmind-geoip module to restrict proxy access to JP IPs.
DB file (GeoLite2-Country.mmdb) must be placed manually on the server.
Filter is inactive when DB file is absent, allowing safe rollout.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 caddy/Caddyfile | 1 +
 1 file changed, 1 insertion(+)

(limited to 'caddy/Caddyfile')

diff --git a/caddy/Caddyfile b/caddy/Caddyfile
index d5624c5..9aff8c9 100644
--- a/caddy/Caddyfile
+++ b/caddy/Caddyfile
@@ -1,5 +1,6 @@
 {
     order forward_proxy before redir
+    order geoip before forward_proxy
 }
 
 golive.yyamashita.com {
-- 
cgit v1.2.3