conduit/tests/complement-caddy.json

{
  "logging": {
    "logs": {
      "default": {
        "level": "WARN",
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "console"
        }
      }
    }
  },
  "apps": {
    "http": {
      "servers": {
        "srv0": {
          "listen": [":8448"],
          "routes": [
            {
              "match": [
                {
                  "host": ["your.server.name", "*"]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "reverse_proxy",
                          "upstreams": [
                            {
                              "dial": "0.0.0.0:6167"
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            }
          ],
          "tls_connection_policies": [
            {
              "match": {
                "sni": ["*"]
              },
              "certificate_selection": {
                "any_tag": ["complement-signed-cert"]
              }
            }
          ]
        },
        "srv1": {
          "listen": [":8008"],
          "automatic_https": {
            "disable": true,
            "disable_redirects": true
          },
          "routes": [
            {
              "match": [
                {
                  "host": ["your.server.name", "*"]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "reverse_proxy",
                          "upstreams": [
                            {
                              "dial": "0.0.0.0:6167"
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            }
          ]
        }
      }
    },
    "tls": {
      "certificates": {
        "load_files": [
          {
            "certificate": "/conduit.complement.crt.pem",
            "key": "/conduit.complement.key.pem",
            "format": "pem",
            "tags": ["complement-signed-cert"]
          }
        ]
      },
      "automation": {
        "policies": [
          {
            "subjects": ["your.server.name"],
            "issuers": [
              {
                "module": "internal",
                "lifetime": "2d"
              }
            ],
            "on_demand": true
          }
        ]
      }
    },
    "pki": {
      "certificate_authorities": {
        "local": {
          "name": "Complement CA",
          "root": {
            "certificate": "/complement/ca/ca.crt",
            "private_key": "/complement/ca/ca.key"
          },
          "intermediate": {
            "certificate": "/complement/ca/ca.crt",
            "private_key": "/complement/ca/ca.key"
          }
        }
      }
    }
  }
}