# HIY — Caddyfile
#
# Local development: auto-HTTPS is disabled; everything runs on :80.
# Production (Pi): remove the `auto_https off` line, set your real email,
# and Caddy will obtain Let's Encrypt certificates automatically.
#
# Wildcard TLS on the Pi (recommended):
#   tls your@email.com {
#       dns cloudflare {env.CLOUDFLARE_API_TOKEN}
#   }

{
    # Admin API — used by build.sh to update routes dynamically.
    admin 0.0.0.0:2019

    # Comment this out on the Pi with a real domain.
    auto_https off
}

# Fallback: serves the HIY dashboard itself.
:80 {
    reverse_proxy server:3000
}

# Example of what the build script adds via the Caddy API:
#
# myapp.yourdomain.com {
#     reverse_proxy <container-ip>:3000
# }