www.fgedu.net.cn {
root * /data/caddy/html/fgedu

# 文件服务器
file_server {
browse
precompressed gzip br zstd
}

# 编码压缩
encode gzip zstd

# 日志
log {
output file /var/log/caddy/fgedu_access.log
}

# 自定义错误页面
handle_errors {
@404 {
expression {http.error.status_code} == 404
}
rewrite @404 /404.html
file_server
}
}

# 创建网站目录
# mkdir -p /data/caddy/html/fgedu
# echo “Welcome to www.fgedu.net.cn” > /data/caddy/html/fgedu/index.html

# 重载配置
$ caddy reload –config /etc/caddy/Caddyfile

php.fgedu.net.cn {
root * /data/caddy/html/php

# PHP-FPM配置
php_fastcgi unix//run/php-fpm/www.sock {
index index.php
}

# 文件服务器
file_server

# 编码压缩
encode gzip zstd

# 日志
log {
output file /var/log/caddy/php_access.log
}
}

# 安装PHP-FPM
# yum install -y php-fpm php-mysqlnd php-gd php-xml php-mbstring

# 启动PHP-FPM
# systemctl start php-fpm
# systemctl enable php-fpm

# 创建PHP测试页面
# echo “” > /data/caddy/html/php/index.php

# 重载配置
$ caddy reload –config /etc/caddy/Caddyfile

{
email admin@fgedu.net.cn
}

# 自动获取Let’s Encrypt证书
www.fgedu.net.cn {
root * /data/caddy/html/fgedu
file_server
}

# 使用自定义证书
secure.fgedu.net.cn {
root * /data/caddy/html/secure
file_server

tls /data/caddy/ssl/secure.crt /data/caddy/ssl/secure.key
}

# 内部测试使用自签名证书
internal.fgedu.net.cn {
root * /data/caddy/html/internal
file_server

tls internal
}

# HTTP重定向到HTTPS
http://fgedu.net.cn {
redir https://www.fgedu.net.cn{uri} permanent
}

# 重载配置
$ caddy reload –config /etc/caddy/Caddyfile

# 查看证书状态
$ caddy list-certificates

# 输出示例：
Certificate for www.fgedu.net.cn:
Issuer: Let’s Encrypt
Not Before: 2026-04-04 00:00:00 UTC
Not After: 2026-07-03 00:00:00 UTC

api.fgedu.net.cn {
reverse_proxy 192.168.1.51:8080 {
# 健康检查
health_uri /health
health_interval 10s
health_timeout 5s

# 头部设置
header_up Host {host}
header_up X-Real-IP {remote_host}
header_up X-Forwarded-For {remote_host}
header_up X-Forwarded-Proto {scheme}

# 超时设置
transport http {
read_timeout 60s
write_timeout 60s
dial_timeout 10s
}
}

log {
output file /var/log/caddy/api_access.log
}
}

# 重载配置
$ caddy reload –config /etc/caddy/Caddyfile

# 测试代理
$ curl https://api.fgedu.net.cn/api/users

lb.fgedu.net.cn {
reverse_proxy {
# 后端服务器
to 192.168.1.51:8080
to 192.168.1.52:8080
to 192.168.1.53:8080

# 负载均衡策略
lb_policy round_robin
# lb_policy least_conn
# lb_policy random

# 健康检查
health_uri /health
health_interval 10s
health_timeout 5s

# 失败重试
fail_duration 30s
max_fails 3

# 头部设置
header_up Host {host}
header_up X-Real-IP {remote_host}
header_up X-Forwarded-For {remote_host}
}

log {
output file /var/log/caddy/lb_access.log
}
}

# 重载配置
$ caddy reload –config /etc/caddy/Caddyfile

app.fgedu.net.cn {
# API路由
handle /api/* {
reverse_proxy 192.168.1.51:8080
}

# 静态资源
handle /static/* {
root * /data/caddy/html/static
file_server
}

# WebSocket代理
handle /ws/* {
reverse_proxy 192.168.1.51:9000 {
header_up Host {host}
header_up X-Real-IP {remote_host}
}
}

# 默认路由
handle {
reverse_proxy 192.168.1.51:3000
}

log {
output file /var/log/caddy/app_access.log
}
}

# 重载配置
$ caddy reload –config /etc/caddy/Caddyfile