# Interim HTTP-only Caddy config for Gate B UAT.
# Serves frontend + API over plain HTTP on all hostnames/IPs.
# No TLS, no HTTPS redirect. Phone CA trust is not required.
#
# Post-POC: restore slab.local with proper TLS and ACME.

:80 {
	handle /api/* {
		reverse_proxy fastapi:8000 {
			transport http {
				tls_insecure_skip_verify
			}
		}
	}
	handle {
		reverse_proxy frontend:80 {
			header_up X-Real-IP {remote_host}
			transport http {
				tls_insecure_skip_verify
			}
		}
	}
}