From 707b9a82dd0779d5279313b39f85eb40e8e6d758 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias.brunner@vshn.ch>
Date: Thu, 30 Jan 2025 18:06:18 +0100
Subject: [PATCH] more tls disabling

---
 Dockerfile       |  2 +-
 docker/Caddyfile | 10 +++++++---
 2 files changed, 8 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index c70e822..4bc2d45 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -16,7 +16,7 @@ RUN apt-get update && apt-get install -y \
     && curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/gpg.key' | gpg --dearmor -o /usr/share/keyrings/caddy-stable-archive-keyring.gpg \
     && curl -1sLf 'https://dl.cloudsmith.io/public/caddy/stable/debian.deb.txt' | tee /etc/apt/sources.list.d/caddy-stable.list \
     && apt-get update \
-    && apt-get install -y caddy \
+    && apt-get install -y caddy procps \
     && rm -rf /var/lib/apt/lists/*
 
 # Install binaries with correct permissions
diff --git a/docker/Caddyfile b/docker/Caddyfile
index 10a7451..f57e493 100644
--- a/docker/Caddyfile
+++ b/docker/Caddyfile
@@ -1,11 +1,18 @@
 {
 	admin off
 	auto_https off
+	http_port 8080
+	https_port 0
+
 	log {
 		output stderr
 		format console
 		level INFO
 	}
+
+	storage file_system {
+		root /app/run/caddy
+	}
 }
 
 :8080 {
@@ -33,9 +40,6 @@
 		reverse_proxy unix//app/run/gunicorn.sock
 	}
 
-	respond /healthz "OK" 200
-	header Cache-Control no-cache
-
 	# Basic compression for better performance
 	encode gzip
 }