Caddyfile Einstellungen zu README.md hinzu

2026-04-04 11:11:36 +00:00
parent 30d944b14f
commit 21e4c7b117
1 changed files with 37 additions and 0 deletions
@@ -64,6 +64,43 @@ Bei jedem Downloadversuch wird der Downloadzähler *downloads* um 1 erhöht. Wir

 ## Einstellungen Caddy Webserver {#Caddy-Config}

+```
+tresor.example.com {
+  #PHP
+  php_fastcgi unix//run/php/php-fpm.sock
+
+  # Root directory
+  root * /Pfad/Zu/DigiErbe/Tresor/public
+
+  # Authentication
+  basic_auth / {
+    username $2a$14$SetHashedPasswordHere
+  }
+
+  # Activate file server in Caddy
+  file_server
+
+  # Redirect all requests to index.php
+  try_files {path} /index.php
+
+  # Security headers
+  header {
+    -Server
+    X-Content-Type-Options "nosniff"
+    X-Frame-Options "DENY"
+    X-XSS-Protection "1; mode=block"
+  }
+
+  # Add authenticated username as HTTP Header to the request
+  header_down +X-WEBAUTH-USER {http.auth.user.id}
+
+  # Protokoll
+  log {
+    output file /var/log/caddy/DigiErbe/tresor.log
+  }
+}
+```
+
 ### Benutzer anlegen {#addUser}

 ### Konfiguration neu einlesen {#Caddy-Reload}