dtoro/caddy-conf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

oikos: split SPA off to its own :8091 container

Browse Source 
api no longer embeds the SPA (it's compose/web/Dockerfile's `web`
service in the oikos repo now) — route the catch-all handle to :8091
instead of :8090, and restore the /api/v1/*, /mcp, /agent/* matcher so
those keep hitting api directly rather than falling through to the
static file server.
This commit is contained in:
authentik Default Admin
2026-07-12 23:03:46 +02:00
parent 8e48911e1f
commit e026ba867a
1 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
Caddyfile
View File

@@ -288,9 +288,11 @@ seanime.hubris.network {
reverse_proxy 192.168.8.248:43211
}
# ─── Oikos (Go rewrite, Docker on mac-mini :8090) ───
# ─── Oikos (Go rewrite, Docker on mac-mini) ───
# Phase 6 cutover — replaces apps/105 Python MCP + console.
# /api/v1/clients/enroll bypasses Authentik (IP-gated in the API handler).
# The SPA is its own container (:8091, compose/web/Dockerfile in the oikos
# repo) — not served by api itself, which no longer embeds it.
oikos.hubris.network {
tls {
dns ionos {env.IONOS_AUTH_API_TOKEN}
@@ -299,9 +301,13 @@ oikos.hubris.network {
handle @enroll {
reverse_proxy 192.168.178.182:8090
}
@api path /api/v1/* /mcp /agent/*
handle @api {
reverse_proxy 192.168.178.182:8090
}
handle {
import authentik
reverse_proxy 192.168.178.182:8090
reverse_proxy 192.168.178.182:8091
}
}