73 lines
1.8 KiB
Caddyfile
73 lines
1.8 KiB
Caddyfile
# elevenlabs.io/Caddyfile
|
|
# Outbound API gateway. Two listeners, one shared route set:
|
|
# :8080 — plain HTTP (published as 8082 on the host, legacy clients)
|
|
# {$DOMAIN} — HTTPS 443 with automatic Let's Encrypt certificates
|
|
{
|
|
email {$ACME_EMAIL}
|
|
admin off
|
|
}
|
|
|
|
# --- Access control (generated by docker-entrypoint.sh from env) ---
|
|
# matchers.caddy: @denied_ip / @bad_token definitions (empty when disabled)
|
|
# guard.caddy: matching respond directives (empty when disabled)
|
|
# scrub_extra.caddy: strips the optional auth key header from upstream requests
|
|
|
|
# --- Shared upstream request hygiene ---
|
|
(scrub) {
|
|
header_up Host {args[0]}
|
|
header_up -X-Forwarded-For
|
|
header_up -X-Forwarded-Proto
|
|
header_up -X-Forwarded-Host
|
|
header_up -X-Real-IP
|
|
header_up -True-Client-IP
|
|
header_up -CF-Connecting-IP
|
|
header_up -X-Client-IP
|
|
header_up -Forwarded
|
|
header_up -Via
|
|
header_up -X-Proxy-Token
|
|
import /etc/caddy/scrub_extra.caddy
|
|
}
|
|
|
|
# (api) <prefix> <upstream-host> <upstream-path-prefix>
|
|
(api) {
|
|
handle_path /{args[0]}/* {
|
|
rewrite * {args[2]}{uri}
|
|
reverse_proxy https://{args[1]} {
|
|
import scrub {args[1]}
|
|
flush_interval -1
|
|
transport http {
|
|
dial_timeout 15s
|
|
response_header_timeout 300s
|
|
read_timeout 300s
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
(routes) {
|
|
import /etc/caddy/matchers.caddy
|
|
|
|
route {
|
|
# Health check — no auth, evaluated before the guards
|
|
respond /health `{"status":"ok","version":"2.0"}` 200
|
|
|
|
import /etc/caddy/guard.caddy
|
|
|
|
import api elevenlabs api.elevenlabs.io ""
|
|
import api openai api.openai.com ""
|
|
import api telegram api.telegram.org ""
|
|
import api deepseek api.deepseek.com ""
|
|
import api openrouter openrouter.ai /api/v1
|
|
|
|
respond `{"error":"unknown_upstream","hint":"use /elevenlabs/, /openai/, /telegram/, /openrouter/ or /deepseek/"}` 404
|
|
}
|
|
}
|
|
|
|
{$DOMAIN} {
|
|
import routes
|
|
}
|
|
|
|
:8080 {
|
|
import routes
|
|
}
|