The droplet's single Caddy container terminates TLS for every site and routes each host to its upstream over proxy_net. Until now its only copy lived on the server; capture compose.yaml and the Caddyfile here, with a README covering how to add a site and reload without downtime. ACME material is git-ignored.
7 lines
178 B
Text
7 lines
178 B
Text
# ACME material and issued certs - private keys, never commit.
|
|
letsencrypt/
|
|
acme.json
|
|
|
|
# Caddy's data/config live in named Docker volumes on the droplet, not here.
|
|
data/
|
|
config/
|