9fa97ebb5c
Test and build / test_floonet-rs (push) Has been cancelled
nostr-rs-relay + a default-deny admission pipeline (kinds 0,3,5,13,1059, 10002,10050,27235 only), NIP-42 auth, neutral NIP-11, a built-in name authority (paid names via GoblinPay), and a config-toggled co-located mixnet exit supervisor. Single binary + installer + hardened systemd, or Docker Compose. Relay core untouched (additive admission + authority).
12 lines
360 B
Caddyfile
12 lines
360 B
Caddyfile
# Caddyfile used by docker-compose.yml. The upstream is the compose
|
|
# service name `relay`; FLOONET_DOMAIN is injected from .env.
|
|
#
|
|
# SECURITY-CRITICAL: X-Real-IP is set from the real client address; the
|
|
# relay and name authority key their per-IP rate limiting off it.
|
|
|
|
{$FLOONET_DOMAIN} {
|
|
reverse_proxy relay:8080 {
|
|
header_up X-Real-IP {remote_host}
|
|
}
|
|
}
|