Caddyfile

codebaserag.hashirayaz.site {
    encode gzip
    log {
        output file /var/log/caddy/codebaserag.log
    }

    # Reverse proxy for frontend
    reverse_proxy /frontend/* frontend:5173 {
        header_up Host {http.reverse_proxy.upstream.hostport}
        header_up X-Real-IP {remote_host}
        header_up X-Forwarded-For {remote_host}
        header_up X-Forwarded-Proto {scheme}
    }

    # Reverse proxy for backend
    reverse_proxy /api/* backend:3000 {
        header_up Host {http.reverse_proxy.upstream.hostport}
        header_up X-Real-IP {remote_host}
        header_up X-Forwarded-For {remote_host}
        header_up X-Forwarded-Proto {scheme}
    }

    # Serve frontend for all other routes
    reverse_proxy frontend:5173

    tls {
        protocols tls1.2 tls1.3
        curves x25519
        alpn http/1.1 h2
    }
}