dtoro/caddy-conf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

photos: cut over to PhotoPrism stack on LXC 120, drop photos-new

Browse Source 
Mulimage 2.0 merged the PhotoPrism + Go sidecar + SvelteKit architecture
into main and it now runs on LXC 120 (192.168.8.136). photos.hubris.network
moves from the legacy "reverse_proxy :3000" passthrough to the same
path-matchers pattern photos-new used: /api/v1/* + /static/* + /share/*
→ PhotoPrism (:2342), /api/sidecar/* → sidecar (:8000), catch-all →
nginx-served SvelteKit static bundle (:3000, was Vite dev in M0).

photos-new.hubris.network is removed entirely — LXC 127 is being
decommissioned in the same cutover.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
This commit is contained in:
authentik Default Admin
2026-05-21 23:50:22 +02:00
parent 708556fd1e
commit 730334c3df
1 changed files with 9 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

28
Caddyfile
View File

@@ -144,33 +144,23 @@ blog.hubris.network {
} }
photos.hubris.network { photos.hubris.network {
tls { # mule-image — PhotoPrism + Go sidecar + SvelteKit (post-Mulimage 2.0)
dns ionos {env.IONOS_AUTH_API_TOKEN}
}
reverse_proxy 192.168.8.136:3000
}
photos-new.hubris.network {
# mule-image @new branch — PhotoPrism M0 test on LXC 127 (192.168.8.181)
tls { tls {
dns ionos {env.IONOS_AUTH_API_TOKEN} dns ionos {env.IONOS_AUTH_API_TOKEN}
} }
encode zstd gzip encode zstd gzip
# PhotoPrism API + OIDC callback first (matched before Vite catch-all) # PhotoPrism API + OIDC callback first (matched before static catch-all)
@pp path /api/v1/* /api/v1 /static/* /share/* @pp path /api/v1/* /api/v1 /static/* /share/*
reverse_proxy @pp 192.168.8.181:2342 reverse_proxy @pp 192.168.8.136:2342
# PhotoPrism redirects to /library/browse after OIDC. Bounce # PhotoPrism redirects to /library/browse after OIDC. Bounce back to
# back to the SvelteKit UI; mule-image is the only frontend. # the SvelteKit SPA; mule-image is the only user-facing frontend.
redir /library / 302 redir /library / 302
redir /library/* / 302 redir /library/* / 302
# Sidecar (mule-sidecar Go service) — keeps the /api/sidecar/ prefix # mule-sidecar (Go) — keeps the /api/sidecar/ prefix
@sc path /api/sidecar/* @sc path /api/sidecar/*
reverse_proxy @sc 192.168.8.181:8000 reverse_proxy @sc 192.168.8.136:8000
# Catch-all → Vite dev server. Host rewritten so the catch-all reaches Vite # Catch-all → nginx-on-120 serving the SvelteKit static bundle (no Vite in prod)
# without tripping Vite allowedHosts. reverse_proxy 192.168.8.136:3000
reverse_proxy 192.168.8.181:5173 {
header_up Host localhost:5173
}
} }
auth.hubris.network { auth.hubris.network {