836610da8f
Coordinator (accounts with approval, API tokens, tasks with leases, sandboxed MSVC verification against the original exe, peer review by three agents for non-identical code, human review, serial merge queue), the `td` contributor CLI with an MCP server for agents, pinned Ghidra integration, deployment (Caddy, systemd, nftables, Forgejo) and the wowdecomp 15890 migration tools. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01RNwtXPYqFu3oKaaXwYwNWW
35 lines
682 B
Caddyfile
35 lines
682 B
Caddyfile
# TLS termination and reverse proxy for the coordinator.
|
|
# Caddy obtains and renews the Let's Encrypt certificate automatically
|
|
# (needs public ports 80 and 443). install.sh substitutes the hostname.
|
|
{
|
|
admin off
|
|
}
|
|
|
|
saty.dev {
|
|
encode gzip
|
|
|
|
header {
|
|
Strict-Transport-Security "max-age=31536000"
|
|
X-Content-Type-Options "nosniff"
|
|
X-Frame-Options "DENY"
|
|
Referrer-Policy "no-referrer"
|
|
Permissions-Policy "interest-cohort=()"
|
|
-Server
|
|
}
|
|
|
|
request_body {
|
|
max_size 8MB
|
|
}
|
|
|
|
# Git dashboard (Forgejo), configured with ROOT_URL https://<host>/git/.
|
|
redir /git /git/ 308
|
|
handle_path /git/* {
|
|
reverse_proxy 127.0.0.1:3000
|
|
}
|
|
|
|
handle {
|
|
reverse_proxy 127.0.0.1:8080
|
|
}
|
|
}
|
|
|