Oier Bravo Urtasun
390f8c78af
Air-gap mirror uses tls internal; guests must trust Caddy's local CA. Serve it at http://<domain>/ca.crt from a world-readable mount (the live pki dir is root-only 0600). build-stack --up mirror|full exports the CA after bring-up; landing page links it. Pre-creates the mount target to avoid a dir bind. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
12 lines
559 B
YAML
12 lines
559 B
YAML
# Static toggle — apex landing page + launcher downloads.
|
|
# Layer on top of the base: `docker compose -f docker-compose.yml -f docker-compose.static.yml up -d`
|
|
# (or `tooling/build-stack.sh --up static`). Adds the static vhost snippet plus
|
|
# the www + launcher content mounts. Build www first: cd landing && pnpm run build.
|
|
services:
|
|
caddy:
|
|
volumes:
|
|
- ./caddy/conf.d/10-static.caddy:/etc/caddy/conf.d/10-static.caddy:ro
|
|
- ./www:/srv/www:ro
|
|
- ./mirror/launcher:/srv/launcher:ro
|
|
- ./caddy/caddy-root-ca.crt:/srv/ca-pub/ca.crt:ro
|