waldson/central-proxy
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

[002] Add Syncthing stack behind Caddy at sync.waldson.com.br

Browse source 
Run an always-on Syncthing peer on the droplet as an off-site copy for the
owner's folders. New syncthing/ compose stack on proxy_net: the sync protocol
is published on host 22000 (tcp+udp) for direct device connections, while the
GUI (8384) is unpublished and reached only through the central Caddy, which
gains a sync.waldson.com.br reverse-proxy block. Config and folder data live on
a host bind mount for SSH inspection and are git-ignored. README documents the
deploy, upgrade, and interactive pairing runbook.

Binding the GUI to a non-loopback address (STGUIADDRESS) also disables
Syncthing's DNS-rebinding host check, so the proxy needs no Host rewrite.
This commit is contained in:
Waldson Patrício 2026-07-23 13:34:10 -03:00
parent 657288bd86
commit 217efdace1
3 changed files with 108 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
Caddyfile
View file

@ -1,7 +1,11 @@
personaledson.com.br, app.personaledson.com.br, api.personaledson.com.br, www.personaledson.com.br {
reverse_proxy bigode-gateway-1:80
reverse_proxy bigode-gateway-1:80
}
www.nazareonline.com.br, nazareonline.com.br {
reverse_proxy nazareonline-web-1:80
reverse_proxy nazareonline-web-1:80
}
sync.waldson.com.br {
reverse_proxy syncthing-syncthing-1:8384
}