Update Caddyfile to use service names for reverse proxy

- Changed reverse proxy targets from localhost to service names for n8n, open-webui, flowise, langfuse-web, kong, grafana, prometheus, and searxng.
- Added basic authentication for Prometheus and SearXNG services to enhance security.
- Improved configuration for better service management in the deployment environment.
This commit is contained in:
Yury Kossakovsky
2025-05-05 13:59:17 -06:00
parent 41fee96855
commit 4910b4e1cc

View File

@@ -7,36 +7,47 @@
{$N8N_HOSTNAME} {
# For domains, Caddy will automatically use Let's Encrypt
# For localhost/port addresses, HTTPS won't be enabled
reverse_proxy localhost:5678
reverse_proxy n8n:5678
}
# Open WebUI
{$WEBUI_HOSTNAME} {
reverse_proxy localhost:3000
reverse_proxy open-webui:8080
}
# Flowise
{$FLOWISE_HOSTNAME} {
reverse_proxy localhost:3001
reverse_proxy flowise:3001
}
# Langfuse
{$LANGFUSE_HOSTNAME} {
reverse_proxy localhost:3002
}
# Ollama API
{$OLLAMA_HOSTNAME} {
reverse_proxy localhost:11434
reverse_proxy langfuse-web:3000
}
# Supabase
{$SUPABASE_HOSTNAME} {
reverse_proxy localhost:8000
reverse_proxy kong:8000
}
# Grafana
{$GRAFANA_HOSTNAME} {
reverse_proxy grafana:3000
}
# Prometheus
{$PROMETHEUS_HOSTNAME} {
basic_auth {
{$PROMETHEUS_USERNAME} {$PROMETHEUS_PASSWORD_HASH}
}
reverse_proxy prometheus:9090
}
# SearXNG
{$SEARXNG_HOSTNAME} {
basic_auth {
{$SEARXNG_USERNAME} {$SEARXNG_PASSWORD_HASH}
}
encode zstd gzip
@api {
@@ -86,10 +97,10 @@
}
# SearXNG (uWSGI)
reverse_proxy localhost:8080 {
reverse_proxy searxng:8080 {
header_up X-Forwarded-Port {http.request.port}
header_up X-Real-IP {http.request.remote.host}
# https://github.com/searx/searx-docker/issues/24
header_up Connection "close"
}
}
}