forked from DevOps/deploy.stack
feat(couchdb): 添加安全重写和Caddy代理配置
添加secure_rewrites配置以增强CouchDB安全性 新增Caddy代理配置文件,支持TLS和路径重写
This commit is contained in:
25
dbSer/couchdb/etc/caddy/proxy.conf
Normal file
25
dbSer/couchdb/etc/caddy/proxy.conf
Normal file
@@ -0,0 +1,25 @@
|
||||
yourdomain.com {
|
||||
# 自动申请 TLS 证书
|
||||
tls your_email@example.com
|
||||
# CouchDB 路径路由
|
||||
handle_path /couchdb/* {
|
||||
# 重写路径 (去掉 /couchdb 前缀)
|
||||
rewrite * /{path.trim_prefix('/couchdb')}
|
||||
# 反向代理到本地 CouchDB
|
||||
reverse_proxy http://localhost:5984 {
|
||||
# 关键头部设置
|
||||
header_up Host {http.reverse_proxy.upstream.hostport}
|
||||
header_up X-Forwarded-For {client_host}
|
||||
header_up X-Forwarded-Proto https
|
||||
|
||||
# 可选:调整超时设置
|
||||
transport http {
|
||||
keepalive 300s
|
||||
}
|
||||
}
|
||||
}
|
||||
# 可选:非/couchdb路径的默认响应
|
||||
handle {
|
||||
respond "CouchDB available at /couchdb/" 404
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user