Files
Orchestrator/bahn/Projekt-KIQ-HP/Caddyfile
T
ankn a5f8fb49ab Migrate all repos into monorepo context folders
Bahn: aisupport, Analyse-O2C-C2S, awesome-bahn-mcp-servers, beam-mcp,
      Confluence_Bot, db-planet-mcp-server, O2C-Harness, project-audit,
      Projekt-KIQ-HP, teamlandkarte-mcp
Dhive: Jury-Voting
Privat: CV, NoteGraph (NOTE: NoteGraph needs complete redo after consolidation)
Shared: AI-Orchestrator, OrgMyLife, power_skills_and_more
Shared/references: symphony (read-only)

Bahn repos remain available as independent remotes - this monorepo
pulls them in via subtree, the originals are untouched.
2026-06-30 20:39:52 +02:00

35 lines
1014 B
Caddyfile

:80 {
redir https://projekt-kiq.d-hive.de{uri} permanent
}
projekt-kiq.d-hive.de {
root * /opt/projekt-kiq/site
encode zstd gzip
header {
Strict-Transport-Security "max-age=31536000"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Referrer-Policy "strict-origin-when-cross-origin"
Permissions-Policy "camera=(), geolocation=(), microphone=()"
Content-Security-Policy "default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; script-src 'self'; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com data:; img-src 'self' data:; connect-src 'self'"
}
# Reverse proxy API requests to Express backend
handle /api/* {
reverse_proxy localhost:3003
}
@assets path /assets/*
handle @assets {
header Cache-Control "public, max-age=31536000, immutable"
file_server
}
handle {
header Cache-Control "no-cache, no-store, must-revalidate"
try_files {path} /index.html
file_server
}
}