forked from DevOps/deploy.stack
feat(couchdb): 添加安全重写和Caddy代理配置
添加secure_rewrites配置以增强CouchDB安全性 新增Caddy代理配置文件,支持TLS和路径重写
This commit is contained in:
25
dbSer/couchdb/etc/caddy/proxy.conf
Normal file
25
dbSer/couchdb/etc/caddy/proxy.conf
Normal file
@@ -0,0 +1,25 @@
|
||||
yourdomain.com {
|
||||
# 自动申请 TLS 证书
|
||||
tls your_email@example.com
|
||||
# CouchDB 路径路由
|
||||
handle_path /couchdb/* {
|
||||
# 重写路径 (去掉 /couchdb 前缀)
|
||||
rewrite * /{path.trim_prefix('/couchdb')}
|
||||
# 反向代理到本地 CouchDB
|
||||
reverse_proxy http://localhost:5984 {
|
||||
# 关键头部设置
|
||||
header_up Host {http.reverse_proxy.upstream.hostport}
|
||||
header_up X-Forwarded-For {client_host}
|
||||
header_up X-Forwarded-Proto https
|
||||
|
||||
# 可选:调整超时设置
|
||||
transport http {
|
||||
keepalive 300s
|
||||
}
|
||||
}
|
||||
}
|
||||
# 可选:非/couchdb路径的默认响应
|
||||
handle {
|
||||
respond "CouchDB available at /couchdb/" 404
|
||||
}
|
||||
}
|
||||
@@ -20,6 +20,7 @@ require_valid_user = true
|
||||
authentication_redirect = /_utils/session.html
|
||||
|
||||
[httpd]
|
||||
secure_rewrites = true
|
||||
# 基本认证领域
|
||||
WWW-Authenticate = Basic realm="couchdb"
|
||||
# 启用 CORS
|
||||
@@ -35,4 +36,7 @@ headers = accept, authorization, content-type, origin, referer
|
||||
# 允许的 HTTP 方法
|
||||
methods = GET, PUT, POST, HEAD, DELETE
|
||||
# CORS 预检请求缓存时间(秒)
|
||||
max_age = 3600
|
||||
max_age = 3600
|
||||
|
||||
; [daemons]
|
||||
; httpd = {chttpd, start_link, [http]}
|
||||
Reference in New Issue
Block a user