f239a939ce
Multi-stage Dockerfile compiles wasm client + axum server in one Rust builder and copies into a debian:bookworm-slim runtime (non-root uid). docker-compose.yml binds localhost:8080 by default; docker-compose.prod.yml replaces ports with a Caddy reverse proxy on host 80/443 that talks to the voxel container over the internal network. Caddy auto-issues Let's Encrypt certs. DEPLOY.md covers the three deployment modes (local-only, VPS with Cloudflare or Caddy, Cloudflare Tunnel from a workstation).
12 lines
347 B
Caddyfile
12 lines
347 B
Caddyfile
# Public reverse-proxy front. Mirrors the `.wg` Caddy convention but
|
|
# uses real Let's Encrypt certs (the wg version uses `tls internal`).
|
|
# Caddy fronts the voxel container over the Docker network, so the
|
|
# voxel service no longer publishes a host port.
|
|
{
|
|
email mgorog@gmail.com
|
|
}
|
|
|
|
voxel.mxvs.art {
|
|
encode zstd gzip
|
|
reverse_proxy voxel:8080
|
|
}
|