switch to Caddy reverse proxy with auto HTTPS

Replace manual nginx + SSL certificates with Caddy for automatic Let's Encrypt certificate management. Remove direct HTTP port exposure, route web traffic through Caddy (80/443) via Docker internal network. SSH remains on port 2222.
2026-04-23 21:05:07 +08:00
parent 83ca0632f6
commit af7d49b685
9 changed files with 60 additions and 206 deletions
--- a/.env.example
+++ b/.env.example
@@ -17,3 +17,6 @@ GITEA__lfs__PATH=/data/git/lfs

 # 禁用公开注册（仅管理员可创建账号）
 GITEA__service__DISABLE_REGISTRATION=true
+
+# 域名配置（Caddy 反向代理 + 自动 HTTPS）
+DOMAIN=git.example.com