From 099f0241a962005b38a6ae83f4ea265300fc405e Mon Sep 17 00:00:00 2001
From: fxy <fxy@localhost>
Date: Mon, 15 Jun 2026 09:03:29 +0800
Subject: [PATCH] security: add Caddyfile with basicauth config

---
 Caddyfile | 58 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 58 insertions(+)
 create mode 100644 Caddyfile

diff --git a/Caddyfile b/Caddyfile
new file mode 100644
index 0000000..a5d6ff4
--- /dev/null
+++ b/Caddyfile
@@ -0,0 +1,58 @@
+{
+	log {
+		output file /tmp/caddy_access.log
+	}
+}
+
+www.xybkwd.top, xybkwd.top {
+	reverse_proxy localhost:8090
+}
+
+gitea.xybkwd.top {
+	basicauth {
+		fxy $2a$14$0U13bqD7CgmZe7jcBQAUHehV2M6qrotbxERgDrHgzLxSXtmRX/YUK
+	}
+	reverse_proxy localhost:3000
+}
+
+dashboard.xybkwd.top {
+	basicauth {
+		fxy $2a$14$0U13bqD7CgmZe7jcBQAUHehV2M6qrotbxERgDrHgzLxSXtmRX/YUK
+	}
+	reverse_proxy localhost:9000
+}
+
+memo.xybkwd.top {
+	basicauth {
+		fxy $2a$14$0U13bqD7CgmZe7jcBQAUHehV2M6qrotbxERgDrHgzLxSXtmRX/YUK
+	}
+	reverse_proxy localhost:5230
+}
+
+nav.xybkwd.top {
+	basicauth {
+		fxy $2a$14$0U13bqD7CgmZe7jcBQAUHehV2M6qrotbxERgDrHgzLxSXtmRX/YUK
+	}
+	@api {
+		path /api/*
+	}
+	handle @api {
+		reverse_proxy localhost:9001
+	}
+	handle {
+		root * /var/www/nav
+		file_server
+		encode gzip
+	}
+}
+
+vault.xybkwd.top {
+	reverse_proxy localhost:8088
+}
+
+books.xybkwd.top {
+	basicauth {
+		fxy $2a$14$0U13bqD7CgmZe7jcBQAUHehV2M6qrotbxERgDrHgzLxSXtmRX/YUK
+	}
+	reverse_proxy localhost:8083
+}