Caddyfile

# https://caddyserver.com/docs/caddyfile/concepts

# Global options
# https://caddyserver.com/docs/caddyfile/options
{
	# General Options
	order rate_limit before basicauth

	# TLS Options
	email {$ISSUER_ADDRESS}
	acme_ca {$ACME_CA_ENDPOINT:https://acme-v02.api.letsencrypt.org/directory}
	key_type rsa2048

	# Server Options
	servers {
		metrics # Enable metrics
	}
}

# Snippet section with reusable snippets
# https://caddyserver.com/docs/caddyfile/concepts#snippets

# https://github.com/mholt/caddy-ratelimit
(ratelimit) {
	rate_limit {
		zone dynamic {
			key {remote_host}
			events {args.0}
			window {args.1}
		}
	}
}

(headerdown) {
	header_down -Server
	header_down -Access-Control-Allow-Headers
	header_down -Access-Control-Allow-Methods
	header_down -Access-Control-Allow-Origin
	header_down -Access-Control-Expose-Headers
	header_down -Access-Control-Max-Age
	header_down -Request-Id
	header_down -Response-Time
	header_down -Content-Md5
}

# https://caddyserver.com/docs/caddyfile/directives/log
(stdout) {
	log {
		output stdout
	}
}

# Import our own hosts
import vhosts/*.enabled