update caddy

files/192.168.31.101/Caddyfile

@@ -115,38 +115,18 @@ gotify.10000h.de {
 	# import securityHeaders
 }
 
-lobe.10000h.de {
-	reverse_proxy http://192.168.31.105:3210
-	# import securityHeaders
-}
-
-dify.10000h.de {
-	reverse_proxy http://192.168.31.106:80
-	import securityHeaders
-}
-
-n8n.10000h.de {
-	reverse_proxy http://192.168.31.107:5678
-	import securityHeaders
-}
-
 gitea.10000h.de {
-        reverse_proxy http://192.168.31.108:3000
+        reverse_proxy http://192.168.31.106:3000
         import securityHeaders
 }
 
-kubepi.10000h.de {
-	reverse_proxy http://192.168.31.110:80
-	import securityHeaders
-}
-
-openlist.10000h.de {
-	reverse_proxy http://192.168.31.111:5244
-	# import securityHeaders
-}
-
 tts.10000h.de {
-	reverse_proxy http://192.168.31.115:8000
+	reverse_proxy http://192.168.31.107:8000
+	# import securityHeaders
+}
+
+kubepi.10000h.de {
+	reverse_proxy http://192.168.31.109:8000
 	# import securityHeaders
 }
 

files/192.238.204.39/Caddyfile

@@ -47,7 +47,20 @@
 		Permissions-Policy "camera=(), microphone=(), geolocation=()"
 
 		# Content-Security-Policy (CSP) - 通用起点
-		Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; img-src 'self' data:; object-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests;"
+		#Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; img-src 'self' data:; object-src 'none'; frame-ancestors 'none'; upgrade-insecure-requests;"
+		
+		# 允许本域 + 两个远程音频/视频域
+		Content-Security-Policy "
+      			default-src 'self';
+      			style-src 'self' 'unsafe-inline';
+      			script-src 'self' 'unsafe-inline';
+      			img-src 'self' https://bandu-resources.songy.info data:;
+      			media-src 'self' https://bandu-resources.songy.info https://pili-vod.songy.info;
+      			object-src 'none';
+      			frame-ancestors 'none';
+      			upgrade-insecure-requests;
+    		"
+		
 
 		# 移除 Server 标识
 		-Server
@@ -67,6 +80,12 @@
 	import securityHeaders
 }
 
+xuesheng.10000h.de {
+        root * /srv/xuesheng.10000h.de
+        file_server
+        import securityHeaders
+}
+
 daed.10000h.de {
 	reverse_proxy http://127.0.0.1:2023
 	import securityHeaders
@@ -77,14 +96,6 @@ gitea.10000h.de {
 	import securityHeaders
 }
 
-lobe.10000h.de {
-	reverse_proxy http://127.0.0.1:3210 {
-    	transport http {
-        	versions 1.1  # 👈 强制使用 HTTP/1.1 与后端通信
-    	}
-	}
-}
-
 duet.10000h.de {
 	reverse_proxy http://127.0.0.1:3389
 }
@@ -108,11 +119,6 @@ fnos.10000h.de {
 	# import securityHeaders
 }
 
-n8n.10000h.de {
-	reverse_proxy http://127.0.0.1:5678
-	# import securityHeaders
-}
-
 frps.10000h.de {
 	reverse_proxy http://127.0.0.1:7001
 	import securityHeaders
@@ -151,19 +157,25 @@ gotify.10000h.de {
 	import securityHeaders
 }
 
-dify.10000h.de {
+kubepi.10000h.de {
 	reverse_proxy http://127.0.0.1:8081
 	import securityHeaders
 }
 
-kubepi.10000h.de {
+nextcloud.10000h.de {
-	reverse_proxy http://127.0.0.1:8084
+    reverse_proxy 127.0.0.1:8082 {
-	import securityHeaders
+        header_up Host {host}
+        header_up X-Forwarded-Host {host}
+        header_up X-Forwarded-Proto {scheme}
+    }
 }
 
-ddns.10000h.de {
+openclaw.10000h.de {
-	reverse_proxy http://127.0.0.1:9876
+    @nctalk path /channels/nextcloud-talk/webhook
-	import securityHeaders
+    reverse_proxy @nctalk 127.0.0.1:8788
+
+    @webui not path /channels/nextcloud-talk/webhook
+    reverse_proxy @webui 127.0.0.1:18789
 }
 
 # ------------------------------