| 1 | # grove's API. Copied to /opt/grove/sites/grove.caddy by deploy.sh. |
| 2 | # Cloudflare IP ranges: https://www.cloudflare.com/ips/ (as in rally.caddy). |
| 3 | grove.letterpresslabs.ca { |
| 4 | @cloudflare remote_ip 173.245.48.0/20 103.21.244.0/22 103.22.200.0/22 103.31.4.0/22 141.101.64.0/18 108.162.192.0/18 190.93.240.0/20 188.114.96.0/20 197.234.240.0/22 198.41.128.0/17 162.158.0.0/15 104.16.0.0/13 104.24.0.0/14 172.64.0.0/13 131.0.72.0/22 2400:cb00::/32 2606:4700::/32 2803:f800::/32 2405:b500::/32 2405:8100::/32 2a06:98c0::/29 2c0f:f248::/32 |
| 5 | handle @cloudflare { |
| 6 | reverse_proxy grove2:4800 { |
| 7 | header_up X-Forwarded-For {http.request.header.CF-Connecting-IP} |
| 8 | } |
| 9 | } |
| 10 | handle { |
| 11 | reverse_proxy grove2:4800 |
| 12 | } |
| 13 | header { |
| 14 | X-Content-Type-Options nosniff |
| 15 | Strict-Transport-Security "max-age=31536000" |
| 16 | } |
| 17 | } |