vasyanskandClaude Opus 5.5
4fccfb9089
Build Admin / Build image (push) Successful in 28s
- handle_errors sets X-Proxy-Error (dial|upstream) and X-Proxy-Error-Detail so clients with several proxies can fail over when the upstream was never reached, instead of treating the proxy's 502 as the upstream's - explicit dns in compose: the container no longer inherits a host resolver that may disappear (systemd-resolved was switched off on the VM and every lookup failed until a restart) - strip X-Proxy-Token from Caddy logs (it was logged in clear text) Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
41 lines
1.2 KiB
YAML
41 lines
1.2 KiB
YAML
services:
|
|
proxy:
|
|
image: git.realmanual.ru/pub/elevenlabs.io/elevenlabs:latest
|
|
build: .
|
|
container_name: api-proxy
|
|
restart: unless-stopped
|
|
ports:
|
|
# Public HTTPS endpoint + ACME HTTP-01 challenge
|
|
- "80:80"
|
|
- "443:443"
|
|
- "443:443/udp"
|
|
# Legacy plain-HTTP endpoint (unchanged for existing clients)
|
|
- "8082:8080"
|
|
env_file: .env
|
|
# Explicit resolvers instead of inheriting the host's: Docker snapshots
|
|
# the host resolv.conf at container start, so switching the host off
|
|
# systemd-resolved (127.0.0.53) left Caddy with a dead resolver and every
|
|
# upstream lookup failing until the container was restarted.
|
|
dns:
|
|
- 1.1.1.1
|
|
- 8.8.8.8
|
|
volumes:
|
|
# Let's Encrypt certificates and ACME account keys — MUST persist,
|
|
# otherwise every recreate re-issues certs and burns LE rate limits
|
|
- caddy_data:/data
|
|
- caddy_config:/config
|
|
healthcheck:
|
|
test: ["CMD", "wget", "-qO-", "http://localhost:8080/health"]
|
|
interval: 30s
|
|
timeout: 5s
|
|
retries: 3
|
|
logging:
|
|
driver: "json-file"
|
|
options:
|
|
max-size: "50m"
|
|
max-file: "5"
|
|
|
|
volumes:
|
|
caddy_data:
|
|
caddy_config:
|