# Caddy in front of Waters Boards.
#
# Caddy gets and renews the Let's Encrypt certificate by itself. That only works while
# the DNS A record for boards.watersmedia.org points at this box and ports 80 and 443
# are open in the Lightsail firewall.

{
	# Let's Encrypt sends certificate expiry notices here.
	email michael@waterschurch.org
}

boards.watersmedia.org {
	encode zstd gzip

	reverse_proxy boards:3100 {
		# Required: send every write straight through. Without it Caddy can buffer the
		# server-sent events stream at /api/events and live updates stop arriving.
		flush_interval -1
	}
}