e13bbedda8
Root cause: Caddy on :80 returned 308 → HTTPS, and TLS handshake failed (Go/OpenSSL compat). Phones hung on HTTPS redirect loop. Fix: Caddyfile serves all HTTP on :80 without TLS/redirect. Docker compose drops port 443 and cert mount. Interim — post-POC restores proper TLS.
17 lines
373 B
Caddyfile
17 lines
373 B
Caddyfile
# Interim HTTP-only Caddy config for Gate B UAT.
|
|
# Serves frontend + API over plain HTTP on all hostnames/IPs.
|
|
# No TLS, no HTTPS redirect. Phone CA trust is not required.
|
|
#
|
|
# Post-POC: restore slab.local with proper TLS and ACME.
|
|
|
|
:80 {
|
|
handle /api/* {
|
|
reverse_proxy fastapi:8000
|
|
}
|
|
handle {
|
|
reverse_proxy frontend:80 {
|
|
header_up X-Real-IP {remote_host}
|
|
}
|
|
}
|
|
}
|