# BastionGuard WebUI - Caddy + PHP-FPM
# Install location: /usr/share/BastionGuard/webui
# Import these blocks from your Caddyfile or adapt them to your host.
# HTTP listens on 81; HTTPS listens on 444.

(bastionguard_webui_common) {
    handle_path /bastionguard* {
        root * /usr/share/BastionGuard/webui

        @blocked path /data/* /db/* /scripts/*
        respond @blocked 403

        php_fastcgi unix//run/php-fpm/php-fpm.sock
        file_server
    }

    header {
        X-Content-Type-Options nosniff
        X-Frame-Options SAMEORIGIN
        Referrer-Policy same-origin
    }
}

http://:81 {
    import bastionguard_webui_common
}

https://:444 {
    tls internal
    import bastionguard_webui_common
}