Caddyfile

# Self-hosted Kyrozen reverse proxy.
#
# Replace kyrozen.chat with your domain for automatic HTTPS.
# Caddy will automatically request and renew a Let's Encrypt certificate.

kyrozen.chat {
	encode gzip

# Use Caddy's publicly trusted certificate for OAuth and Afdian Webhook
# callbacks. DNS for kyrozen.chat must point to this server and ports 80/443
# must be reachable so Caddy can complete ACME validation.

	# WebSocket upgrade support
	@websockets {
		header Connection *Upgrade*
		header Upgrade websocket
	}
	reverse_proxy @websockets kyrozen-backend:8000

	# Forward everything else to the backend
	reverse_proxy kyrozen-backend:8000 {
		header_up Host {host}
		header_up X-Real-IP {remote}
		header_up X-Forwarded-For {remote}
		header_up X-Forwarded-Proto {scheme}
	}
}