From 6efca876aa836be0e59a95e83242fd791cb1e4c8 Mon Sep 17 00:00:00 2001 From: James Ravenscroft Date: Mon, 2 Jan 2023 12:42:18 +0000 Subject: [PATCH] configuring firefly with caddy --- .../01/02/caddy-firefly/images/insecure.png | Bin 0 -> 24725 bytes .../posts/2023/01/02/caddy-firefly/index.md | 38 ++++++++++++++++++ 2 files changed, 38 insertions(+) create mode 100644 brainsteam/content/posts/2023/01/02/caddy-firefly/images/insecure.png create mode 100644 brainsteam/content/posts/2023/01/02/caddy-firefly/index.md diff --git a/brainsteam/content/posts/2023/01/02/caddy-firefly/images/insecure.png b/brainsteam/content/posts/2023/01/02/caddy-firefly/images/insecure.png new file mode 100644 index 0000000000000000000000000000000000000000..6ad8658f64407595cb819f634c81c649244d57af GIT binary patch literal 24725 zcmce-1yCK)^Da0@Z~_E^26uON2oT&MKybJ?1b4Rt5AN>nZo%E%-QAtN`TgJ9+THhR zcWZ0wojX-<=gyhw)6=K>J74$ttsp0XjDU*(006S&x35Y707(J>5Q%V*;4>FC1lIsS z1W0}rR&hx^S#|t@@rVa|VFJSXZg6;Jou`G$JH`V((4R|d$7y6^2fryT#;jj}CO*Ek_j+q5xEpEn%r<0Q}bq zrw>U4j+nVCQ5cSxOdOjPjyRwP&Jcz;APQT51bpQu(l8wGbp`><{-`3~!k9p)B5=Ra z{;QM0zkBqA&_uM`y-oQip4bJ2REgfBLA4@j^l(;)e2>23dr(|R=?P2yR2~(ps4~mJ zRCRZ{HZ1)4{zgG7nAv}ch3EWi(*K=YWeNaXZRO?9NmRV>K;2LI?6G|-T#e^y2Gp|Z z@@Q%pAj;2s@T0Hp$$@7Y9yFR4`Z__qmFoqM#d(!7nf+r8{TJVIddr(S~Ge3~My$kU>=a9_F3-22^%i5DEEPG0GtJmd+gEg6f+*p+z zh!ArEV(gHikgbwS<(Ho2hHR;02_yiO&X5%f=A!qeb!ERr9beKmL7RmG%e8vF0)dsijU6j6PmaN%xeqOcWi(H@^uo^8QEz`b#9$nUtg zcF65vM0UJpzGF}QvJRZ5G>N;)X$oM5{RRNOve~1WTQGqXv?K-!lX*&#rM8L=mE=zS zS)i3gwO*Gq_JX2}^hYw)LbA?TyZRMwu)b?*wHRBDet^_Jg+cW1F?=h0{hKIUhEZg` zdAdpW8rTF~5y80r+Pc+UpFVTk^pLRDJd5Y9zm;^mY_qEf00FhriFFWTbeYmIx+^W0 z55_;#1cD`4t;8!bPO>hTYXih2#|eW1JER5%Xc@MBYqOKfivn{RD%4?bHR}{yBO~xz z<5fne=}SJdIy_##vZg};O!N{j%%c)Tn{>I-B2F*1SM(KbW+Fp&GgCNkLypQ)sP>kt zXV1Nadw-nM+C5UIIr%m4vc$o?(}Y>k{$R7{M!AfY9GIrQv5r;xdM{dq|FmvL-xh~9j}%r+a%5|;5e^iM@GR5T`8 zM;OiJb$JY{3djtd(A8O_9u`>Uz7Hu>rff$vAeJ3Ng}M)PdWre0ksrgCWo`F7ie_C=A`%TBdD zvBLEK<`Mu1VYLZ(^VRwkw^387IMjWI1}0olA_&`KG$;+={D^*OuIf0L-FO!e?yxWS zX3$AHCq&*uWj;z)kXY#Yh$i&)7|%)J;9()k;LMQd7vPxZ75X(&X0^(9bh0EnF;Ila zu6t((_6GI>05ow92xOK|%D96;lWZOZuu*PZ_(K=16v+H7pG4qr3N-e?O;!cpobWq;2+TREIY zN`zV>OJQJ_9BY68(YHFem_Emn7-m34-{@=d#Wv<@eN2JdDGoLdD4!ix@!%y4$+||{ zLDIb01)JGoZZy;#U)592hl!mbLYdb1$3-KOc~vF5zXH3+Qoeb5_eVKp-C4Y$m#4MYd@BXP_J z!FQT~rE_$=qwIi7Rv$8xdJcHo(HVJ15gA-tZKrrNJ!?70l>(aCsLSWj2wNi5sz)DE z;n*21M>Ex=injyk(c4{IL9C{lmZ)@1AbgJSsD|rWbvSReSyAzXUa;#?Of9sMZr& z1dUc7+lA*?ZCpZ`+UBfPvO*Ha!bBP@a`iuvKjcO5a@6>-_GE*He!F&VV$a`1C^y_t#!cv9v-MDbmsas<7CVF7{%K9Ft0efPlj5p z=0eCivjv_lBDx~QEhs0qmdhPQakHG&xx-57It#Zqkit>W6DqfokYD$}LquPROQ}8= zFSf9Vih3eWH?>~b^-S3cdgB?_s&b+YR=VscKWFqNe8bTF$C8Ik;M{lZ{G8 zYcdStFGD7_1$($cX6)i}!Lg6ndL<02ola?bRM<^UPSdgGOKy^B4C}7N^YFMKF=^dJ z-k9uJdfR6T`vRr`rFn+0JHmw@{uw*&Zno-6T=gupKZ?JpH3G@M5YUrW(rb|f1vd`^-$kx0tOx0g56&&_kgaR|6V}18PWFAjPZ)Ct)nK#S&xvM?@P3_>l9y3W%KeJpdbpyRG|{z zioQ256t4^qwP5u5ki6C0jeM@ zarE9!rpj11aUHhJW`Ip|i&hhtv{HLwoTKyYZqPVi1{t#|(_#NM?Kl z=1&%#6;B=035^WleZh}>sKo-Hx8{hG=>6aZf_B5!%7U33L&|AOFU?7{ur{&oXC2zHVRTfhlt!>VqBtH^EI-Q9&nt6@7G@5mI%#^B z+t!~;GlAWorP5DyJP+F=yNO7JSMucNZ1kTs1Og8l8myI%p2i7Ach?$%qH#A-64+4@K^Zg>^>hU;)w6I`VB+J0Wx1)X0UQ-M$U zr2U(Sk~GE2I)@ZFptY&YOIQgvQt{Ybc7U21fh8wriYwF9(yCCwCUh{=3!7%u)f5X# z!!L^c>U!!|xD2KW{r*Ia`)L>iKrMRDFeZ-R*Lq{Asgp&=UskD;@o9RYB=kcHw8-Sb z*D@wfT`IR%Iz+tg)P)BY&8SZ?W(#F8<_0npVhLnDSScDfvrD(6v8OLQ8Wv34Nr$~M zVjz%aKB~(kiinG~Kdj@75wr13887y*x);j_E;JNfYA1pnlibc&rRo#*&Tzt~1MOXt zHH)B#l8!bSbT|z|Wh)&o9UQ0lERcU0&Wr&weenB}vPlxB#M~FGX2*I}Vqpapg`V){ zi}~bt0Pxv@S7oD-cfSw^F7Lk@Sb(WR&kZ?1&*NggH3+7xt*zo{z`wqX3G;f%+U z+mdHcwx2nS7)oQeg;MIS6G!QXFs1qZHma7c>D5_A$Y_N^_$X5?b3(bY_Eej)3E_UVY^ltS zFEIw3F9Rc8sfzuS!CZ3D8%CxyLZ~S_a^2ArjyWz(Tm=H2b824mMc+t>Le9V06CQPZ zp>1>Om|#t|h|FP3RYWzoaHGLC_*>NiQ*&;0Z_az)sSlFa=3+JWJnR_%D-lMRXVB;c zLDcQdK*XyF``p`tFOg6AQuHUgAt^f9V`}NAqnR-b-$JE>=mN?JibXoj741;?xbf-o zT#kH?KgY1hw9=0Smy=aRN_#q%`0T7>WrO?nmOM>%gsDww3M9~)3em}l zqZXzuQuf0`fn<`9y~B|RUeQ!6p+_-jZC*<2eSTQZ?~Z{*fi!=aYB}8APpnC%yOi4Q z7^4{&D~Pbkd@||iZ`Mlq5CEaRrR8v>wx5qy1o8vJk?^j6#KBH;-05Vd>ftRAmf9H7 z%l71USRcum(87#pmR(hPdyOLga(GH~Y$fEq3y(3U6SR|OVn^+psaWxu_z!qhpec~A z82N@TBBvAaGiB$5(-rr9WYJ1GG8RgDI{)|=^V1Mb{T;&lnZ^r-DIg*x+}-8;u&{>7 zEQ{=UV4vWK?^o%?sX*)v{KA5pRsq5909pg`c z^9oHi=BcbhbguM+c;z%wogEt`ZAt7WgyJ(AQo7Nh-NWPqX>Wb%fQbgbG*Dq2X&q1G zf$Pyqy>11wQ6e<8&4GZvo4WRjw@6`Lr(6x_A9Bsg|A(kiMGA5B{-5}<{}rI>AKr7e z$&UGl_YPboE=#B86@ZzsXx<)Fn5Nzxjk>a z=y1@;{9jQ61`d&6L@jqS;~Ci5*%=utYHKk73=9l5HZ~+ABr2;((HJw z=Hk*=S6A2E++1GH0JM6)3y_oVE>szgjg9fU-I$toK(l`WS4?Sn!e_`lfUQWp_oS0A;oLz4I$89bpTwMGV$T;8GiB)~^TB}+_ zE80|@_N4dp&&Nkdb{d$UYA~1jYW~n_SW^?S&dbYd-?Z}U7u=xgYRG@OqlIKM=(eA1 zZvNf0Q`7k#AB%;RfUkUA7#N=y7;ik9VY|pI>1s>MNVolyTSrF+i{VGq*TFJ^e`>*R z@_fDn>jYwBVLCInl`A@6qwqL2BwBudMwR zOi|4xy1Kg^9UW_=s~Ot(x{ab_Uh7%Y& zJV(p$)6M2Yc6axFrKbORY|j$Q#mOE&W84gBS5Q=x)7)`@nB5qIg%|lVJxuG8jYV_- zGdH~v2xkNpIuUSiP9rU+w&P$eCMGIROiTV0sEjnpn2LEJCTH?3)XN;Gtg1FWASM$o zDk@S_Q-c-`px_5F!2y|OfX~K333&X=60h2<`ztXq=yqGhdqq6+k7F$$ zj1CSDCHFqm%7K?|aCKO&uC7N%M*wR4OVl8l`MWfI*!ZTA@n;jY(Ih2QU7Mi7do&<3 zKR-SpfpTzu0^vVzA#`d=$;!$KAd>X^Tlmh{LdF`bysDK+)n9&Z%H4qhI5;|Te~BQ| z6{Y=0VVgTAB4rW%u8N!f)sniL)xp|2K&3P6FW?-?B`Dk>vmV_~Q= zoM<9!qgx8*JR)COs*-CeNkB+V4Krmle#gQz@IMwC7!)LKZOs5QrZ^Nk9|R7P0j54j zeM6&(*S7?YoQKeL5oeiw-C&lo4hseb#@5!BO_ulA-FqpyXw__Pu~ofIBJH-#ELrZ` zx6bL2WQ2c@kKp3wHU@!;hbYNRbj-l=GdNE+qK;v8H|KOQq`=*3eFiQJZ~Kw zU}Iw5UF}L!QWm(jACI>!-qZ181L=9|t(j3Wn*iaShl{`B;;zn@>wNBpHKLkY>* zMewQv>PLO?kP{}#si)&sHhj+D1v-07aL$t99>>D z`=4p5oR^p9>+6fp=1AH=x z&RoB%aG(Hy3-_e{_%;GG064hz9Zw_-l4CF^Iim##+`hfK1DR9^fSu4IWq5xSFJi*Zy}YQFQ_O;Z!HZ{ez%UF0==zsn+^;eyWU>2M%5o*rqzYe zE$2QvpV1684g`zklD}SN#Y^hwcnw4mgAql8^{SnNL#m+n+reZG*g*HkGtLhV8o@S| zn3zZ`8Z_{C4EO85kJM zRp_Ds_Io2uVDK}UBf-wb=5(^Kd2&K$xA=bD|4hMiSdw6+4aTIzGhW=hyyHo%{asxo zBqRpQ^;VSf>0mmzys)s*`8>U@?iM^~ydmrvmw!{hX>@WD4FFrxSUUgkuAQ{BG%G8s z`^^Ef!@&du6wJ5g=6V3^paMGQ=IXuQ-~RsnTU=aBt5ymIM@k9`Q4We$&|sT|^G!-x zZ1;SQXVgv4$cS_{w$}NV`h^BMK{X9F>*=YfbcZ5KxO`bS!~p^<931fu@K(tG`u$%s z#qtoQ)TX%SWMK-&LZ|_`(x$RZAhO6eKp+5F{G$lHtZFUTcw+J|!Dqwsi%?9H%W|{{9W<&C z_yaBZ2^#8KG?8RT_P0-wKfNLP!g^HdwBOE5s8Hb^Jlb1Z`4Wc93JW{)kwoaxg;A@k ztLZRHN=s#=q(TObD9Fg7$jm?>io+>QwlJK*!XfM|1#ri?zH@CoK3^g@baZr%6#By{ zR1xH@pIjOm8jvE50&g3`*`|KNFUL*6`DT17*EkC+F=5Gxo7azsVU!1EN1ETi>-7=M zbX6@{g1rpC?COU;bW>t6Wy0}wVdTGwe|(D1ja5g$rb9bSdw6st)l3zjU{mmrMCuLqk z5>irfEim$wJUKZ5fXeAowEq@*{-K!vJ){4Baq0P1In@NP)=&Gk0_lkUsL`llN%i4U zE#5B=s}CXa2I7e>E(ZJQ!`4{!<-n(%{-722II&ro4Zer6$n^uLbLjW|kfM{}>*l9% zt`s>>*ENb9>FBOAKKboX{n;`fB7j!Z|rd+Wl0sbM`!r6L;I zhcru@( zq2j;b3Zc3i9QHM&ORJ+W>jS7#eNtcTphBZ~JiU2m?o-sLF{>k#@4r|F-J%Y)Bfec) z1%1wX!rmio_<}=yND~FEU!b9tX?%LL_pgC+$f4-)TZ%h=(6c83Kv%#vtJ`xUSCi8b zukC1WBe?P-(_T*A=~Dag7YfjI63lCYa_Q`B=Wu&?+dYOAcdIro-_c^YR%uNzHb(FU z1tN?@hxB2h-093#~hB z0}h9^wWyV+G{d+C%;x5iw*)A_LD6L*`wv*uFKKNpDB8{qjdK0jOqVZL@S<*yu3Wrx zp3)EpR|~`5GWZ+&dna?Qowb7RWv<|Ob|3G$3~tUR)fBl--O4v9i~}B(?tc^8+t11c z+WKGZXriyP0^|h{y$+Jg#{{ACRNDw>UI(}mtS!190HR;~H6BNmYwc%pa^+s#&R@Z$ z0Vxhv+ohXr9zRw+o@L**J9;V(2C_p*BFet3_xJZMwjD=tFQ4anzcj0m>8!I^d{cL( zq%@I#KNpuGKFUWHANbH4p-WIqn`LG;5u;}!khOVgBEGs*3npcW@X6i54w7Nu(@3j+iELhP#X z+tH%aNC0BW+mDx;t)fhL3MBoj%Zz;MF^9C5YYuh#W};9t8hHT7S~yMcuSrc38YskN z+Pv*o!Yf5+G(*dh#1(vNACXPZcs*IDZ$q3v(q3EAl{G@ad4D|1Xb|I}Uu@0J`NT*W zXH%?T!ol;dy+E7(TpbRDghPHge{c1C5wE22PM^|zRCb%&yUee0E%MPyo0~ns_Nbyg znGEoWU0&%le!CK4in}py`%AL^5^`Y$fmnVh_oLM+NzHb^cl|xJMe%;irX7JqFw`$d zz?p{prjHf7)=ip`-;631?eou@~T9yiy6 z75(I_Q9T)`z8c^B(G6N=hTusYcei)mJAF>tmZ{bGf{37w|GAO4^N*^sEG7^Y!n22o zISY#AoB6&bB~AU<&Kup!h2~21qGSHMVH29Jl4N` zayweZ28X-bS@M3tH9uCmH6jTp$E!Ib1hHHQpDfpyYC=gMHq03lxb-##_qW_Xe1`<0 zt~B#8F+*Qc*hXutnshY}vn!*gT=3qZi2=AiU` z`~D+ki(7>BZRM|?*Sugo!&#XK0Ed0Qd-q#LNRcqWTTvLT>|l5AOpg>%Z~4GZ;n;^4 z`4nEcUnqr&fv$KO{;RnYp`gnC<55<(_mabtnVZAxHu+Dh zz}dG8bmex9Wum2_kstdz8n5cT3By)TL&T1B^Zg~e>k3A$+VC+fNiU(+^JW9b`%6>C zz@x`~cx-ysM~xrfzfSL-XGg>HI-5ADE(h!JwrHVCDl+e8X#JQ;VU&sZT}IW?QJoT6 z^RHQ~hi|@Aue2&@&X`O>`}H_q#x*7EJ*c!zpBa9nxVW~vPMP8-_aJ;_&;<*kmf!5* zh{dTaEMt_4I<(d%OLD^NO2zs1B_xs%dfIm3tNhqx(fWJi(K+7ahxcR`a!XMc8MQeqDuJ?2<99Pv@4U=x_l7P%EK;o@&!NT@ShZujVl$5twD@}K9;6rhG8Yah0rQdW|W(hxGs-V-s#0#-+ z`tV0xn&67YI8vqEieNX+x*+DA{RW#{5x<>89J}xy-Op8V$hzPD45h6lm z+p3#p8)d?8a-9C@pDdrCGVv60J@Azbo*qMqO_&8+mRtFJ8pl#x5Jq6#58**YAc>bw7TB+AEa%ifOGG9S^SFctL zK!=ixCd9{bO#Cdo-$NIV2Pu7EE{c8YckcO~GK%`B0c2&Di*(3KeZGyKamQ7bW+frz z5S=^Nb_-|QNsdNDva+z4y;9d#Y%T66YQ-9lPK>X|MDnw;%$Dp8=yliF)tQO+yWv?z z;P%UCTw!*s3ibWwTM$xwe9L_DA(yM3GjCPi5{v@n zIjA-ZwXakh-&LoR#rziVDAxxUlZvF(b6aI-O{l1A@M<{wYH`8ba1HG|{Tw~vetGo! z%|txjgz+h=Jq2J4vXETk>$q>V6>JNsW$E@>Eh~0U``Y%HD>Yx`|DI0Jcwy2vBP_Qx z^;rYH7Y6E?m*&?ST^O%3^ZN66{OnxZYgsH2>De^Hka@1xyDfht!;*kAxs4JbFMBl^ ze}oNZa|3yjm-W~Jy({S*ewwwqjeF<#?~lmD#qPxL`T2Dv%ZZmC)f*Uf^LcDsVAaGg z-pcfgp`7k!Nqi43UYV9_TILw$GdQO->e#NjrXiar_c7t7&oW%aleEl-uWHiCV|}8l zl}eh^5j_d|WLhLX=Lxp7?#}g{utceHI^wrD>7(>&cG!xPJr6-0-&?K`J`Cr1w3i0$ zW~#1wgyDnE*8VOvo@S6wUkQ&6IbTKe3OYRu$$eDvUdZprtGD5A^?p3;lEP6X4Q7rP zeMQD0GG;g17g#J?mb29SSsAOsc9Cj5z4{mQ!pOQc_vMj(gG;&F?Vw_{&D?6pC?$`k zneO>Ce09H}bsx@H1quJDLX+idg<`muQp@`Jb5R){N_obsb5p9X{rW8Io>zewBv2&y zupelncDl^;tgFCr+O|+oqI$cVhur#jhIntIzSz3Im2rI^>+4rKS8zrx#Qp=P(UYQ22d4oAwZew`6-W>^Wr$C~JO zD4}K2TPDahPq^i*{1&gp5yfzNFQ)_MWP>)z4Qcs7!Y7gh0+0#4OleRlUw5=VE#((s zx3G`Lh%zGW7KtKs=e-!nug#Xq&rUCU-(p8EwH==MKW3eBC9kL1=uzQlXlcRjeQSFg z%oo_+$jsEo!ZIFK1=JkujS16O)oL48yoi;vA}1WG2VhxQi38K><+ znvlr-KfVc`rgAEjjAj_jsE_M{IkPF%T8Dr10I0L}OWp1bm8AM*S@_%uc=bznNTbOU zmV`+|N@_Ts&hLD-qF=K(H#Z07gXX5EV;mIWvUnUE9l%_CJD=|J+#X(CnUc78U!{IG z3k%C!sRlYKs)CY|(rrQRu{o~wN!_Xz!yF#Gc%p;Fd=NTXnZXI#k>^FcSP3IpXk$do z5Ilc9J-9kMEhhM|E5W4xyd`aI!ZG7OI>5{s#Zmz6ZFYXm!+mN>wu$tIdm!_)U*hfe z!UtVA;0w21&(IJJ6H_Ia=<$a^MnFOWXM;66ygXS2<|()R*?F5^PV@W=x{vq+ncl=V ziYUtr0~m`pPFFWB927b8vRKXtxjk6pmG_Bh?hlJZ-`nWTwMl!~LqWLY^4Q+j8&$B> ztxgXg>&+I-=KOZX@U!dAsDP0~W>QwxnmbV_*pDkUCi2((vjyA!#5cE^`&6z6cz+Yk zgr%NbA$;bVa{xiAyX)dtFfFH3a?B=rDxrl#j`I7%*-$+l`D<%+!h2@jnW^fz2Kp}o zxMNnspR;&`NVvGy#nd^5ih-NK@ezlIyC)};o-@^mlG%|;a5|@tSt$kftG44n;mf}8 zFa^?uv-9N%v)$&pzG}l+_7%ZdDyNeWmb?ii+{?krVFK*z ztIJD&$;%Ilw2?Q5xYnIxJSZ3^CwsfwQ$b^O)87N>_{A5KbCTF_De)lVb&OFGZ}&g3g2sjsVb^}O8)H={E!t1nDAyJB&^|jc zr2bv@HvgUSh3y8+MC=uBZW{&LEKI73McKOFXK1MhKg(t`9ZAT(wXotfls~O@nT<19 zMURDkgx_zbU*+oj^;gp4r^9+hOtcH76ACBM@D{-b37T-Nmc|%dMRBu3mcmkRJnWe8 zF>kCpsf{|jV*qLZ5&6abJQ;5OvL-%^LoZ)@@ot{5BrGjLzKGpJaT>-v$F8Cb;rsQ9 z%S~&zms?kDLBU<{mTgi!tYN;f>)pv>$Y)v>=tTtxRmqq$6HeQ$p2S3K;9$07eyPr4 zb!Fvx*%(DkQm8V0PzE()norCZ7ll$`Rv4oY|6&h(f5S^>dH=B?&d+Hm-^q!DfX4GGQ)Gz?$R?~fGMl54BY>=1z0Yw!^NejmpvD)oe-007Ze zo4fmp{5zEAl2G<@KWx`(vlf~;_w2Jm&j{W*3%X08O8O3BfQ@2o`@>CX#R}P$;{a;^ z(K$r{DG-1sSWACe`D_2i{bqhKE(Zt=U^hEm+Lb*$d|-a}aFXF5XXQju z_x$u_m!v|VV?Jv>v;0oxqMF*v!E-irzBgu6)qKq-A9*I;akpo6Xsp9Zb4E8DxNsou zmT#jnAA$ALL=Q`fH-5a@wYIhfQ^X&93gox>=J7u~5QAM94TwRfwGnLBc%0TVTE*r> zr6X~xKh#uZGXp(DC@NxunseBt4snj6?wWI6 zB>BzxG_5pLxk4GxO4`zCiW*8oP=(Iiuz#IScc@-%92^*SdkUWwZWArHk0J)0Xle4l z&>e>{Ntv4#iRugA!W&m7<68crrq0_m9EnO^?MLBnGrgVIM1lE8$ei6#&~DkiE-$QP z32C)7npL)TkE9Crsv0b;tgy(qDyurS_QM>^Mb6@#dD01A>E+weYAc{*ag-59%pfK++%;Tpd5J;^Zpm9P0Ze@cLjj*{LJD#%pYThbk1$#~@@u0K>v22WoF@~TqF$}kkTJag9$yAq!F__&uPC3U zTUOGG5jqD(sm$#%CyV&Ehs1E-M@|hK^eaC3wWYaVgL-WCqv55Q1Ue2bMtQ{rfiUoa zj)XnQz9oR6nF?_*dR>Wo$p;78N- zUIK0K%}1F)n$1g+hPx&v#>TgYd|ySO^w}HhC^3#AQTAxvMoQ#6h>*i0dW|%Z({{X_ zdXqJd5xh>Uv%Ymij^qi|{b7vR<#wyRz2)y1QHH}lG$YbYN=Pi3I(3&1m**7FO|SVa zS~WSg%0vC;VLIv*XS?RcvNE3(H_JPp8y)iLRp4YV27^>LhXGw8NtTDp1`Qg?arO^G zo_PQQ!)kIMcrvQl!;=wBf7j zDS>aREEMZXH2Yw#E02ziO=XT52m{k){xfalY1{wt>DQNQsmp1wVe-V22%FzOzY^}H zm%*Yi2qp|050o4(xi7NcQM4(|#WpiOL9Etk19pPv|Lb*;+5gdxv-((LFi zgHl8C_Yty%i%dO*`IeBCR9Za2N`8~^`XD>&dV+6hbwpEeLpu@#fb4Ldr3M$wZUHmO zRhrb+=BcN*QLrBk;j`sUta%&(VtmhySdZz$Fu9T^=p zHZ}$)O>Mu|jCan-40nNQ#0Ym_0eVnX_z$7!@&fSALild*oUgZ8ZwF_?z`!%aBX$(D zjFi6BaQX$DRVu9O1pmCUvSPi~`uOPj3DYx0Q^BI&LCfhlFgH{PuEi4Vf0ClG@?&xu zSD3U!f(yB)QJDwRYn*1>!=zHKhHz*QP)w zLbaXCtZqZdLrF^mek*Rg%GY8I7nEck8#{F<9N?@4G3D+DoI75Iq5^~+?wGRk8G+3p zRp_hD{+xF?zx>`eGfh{Nv^u@)1`aPXG;`TX_UZb`$G;u2nw9TP4!=v|^Bwd@()>g7 z-#;rM00AmuUZAAd>i7s2jo6oymyGL%02RQ8>G1C&-nhYf!XGIb1d)%T!r>eFd@b*M z6!aZ_MTKO;LxpySr&|P+a^lIh%&hr!7*h9A|CC7B+O1tyD zi%&Sl1^W4#bSZeJpQ0BUa)96b0$RP&%Rx;+*YFl&s>=@=V@`w80!Ro4Fqim2;c@HY zjWV#-vj4FEOu*H{{oPa#Kz6*LJ*Vpmbzz%nbkzhS&|eN5(##UIW*@M20%uaS-!u1%jl*(d&hcE z_gdkFSoWT|clxt0xe<$zFhMlp@ysC)C$rq{f3g4#U;f&HoBG5{y(z1LbE@v{m>bJR zE#vx3p$^woI&A;SFwduy_(wwuD#AZdp~RPYI$t&1QH+NBaSFEt(+<05#;r8bb;XexgRSHhr20@_PaT&8kA%uh+@k`vUJ#LKn*UbB7u^JdT zJ31kx_>|ho6&2b80?sHpQbG`b=(5Fv&qwxd9~RkCV`f9tfBSTnSVShfq#_@wno51D zpS+|P!4>D=gjzh!5w$I2-Y$Z#*@EF#qc5g|(aYc0@Cckg2i2bl8&`SNvpxkxl00060=W6i^QeHD(d>~ND$7c!^(LM>3#Bk ztGJ~o0rR${N?ap?hQ53P$9reX15aAZun4w_*;}3v%{*T->FMpgbtMSQ5#&I?;l#5+ z$b=Fr2X*iy7_fN!;zsxBjfMc4OKZbmJ||Sg@RygnU%8E&zLO#-^leV%f+{3MN0Jm? z2BkF81;d-$a~}JuNeu`^?ZUc(9HQS?w8^x*vLx*^L=NYy+kMS z&Dwa5YO+dyk*ZA8aZD3IBytFrzdPn8{D!356#HiCkX71V7g|vFq<$|xX`IS}3mAQ; z1BmL}7+0P3&Z7x%$pGT+Xky^tYKjHHN1w~%TCk-5A+b362ZLyL@o*0^?EHN#L3za800t8C({OEmtbIW^8Nf>Xq>tK3Wl-HM+dyztZxF zMNi7Qx*fH(Y~0*Ut*xo~mvZ-Tbzh-{nQ}F#^KSZJ2cZYaaIjg!{lLRkl~lfc2g{Qr z!;vDZh#^a}mi+0z*8)r@vK7)F)@?>(Xo*d!zI4D5`49=55KBQxLi+Z<<9#p`k2ZI6 zEYaj(lU2s}0ARBg(i7+9N>by1NuhTVAMkB{7w41+MX8#EN;Q|O0fypT#Vq;x#>$_W z{&Ow1O!Or^2RoA0v?rA6d78H^n>tcQ=8>B8DWY*D{xlUfYqa`o=3i4`tIxvG(1WHu zVNpI&$gQuWJM{;s$jcjq~>iUmR%;sUwK=O6?~BQKWBLo!{{~uu|D6&MA8^G_~<-D*3If`8Zz9;1BfV zg4DOn6w(M(a7lE}=kp)mc8xu}2xvIlT;@q`S5Z=qC5v{3kDb0YzuegCdVX^G&3T94 zim6_FB52Wz8mjgbh}!z`<*{^YL{(G!*UUY4(YZZi$CMVwz*J;7@34xs+Zby^`yUpFrrPNAO+G6sO8e?-|gxak<>`W4z+!ab%R z{_wA!JlCQ387}sLw992NyIl4kjQt32d7L~=_0giv_*;Xqdc}`$?p3ItpT8P0sZX5? zYfVZu&{*|jvF5wg%ctqOvNuywbbfT^IkyRp z{8p+`SG_njy|G%PlHPVJpB!i(*(zgDJc18WbmM(d!2A$08_LRt3|hWI`Qqx3L1~=B z7}LG|h3ifHO+xERd|;0a!Dn-#XQysCQVrl^%M{*sWYn;v`ZF|$eRb}p6=EOE%rQCj>ap^pIo!xkVy_ZtTc74r~7q1KkXn#IVeTbb-WFAGn*VSU^)xb;Yt9Nh}<(wnC{emBR z-sYvgc}N2*geB2F$Yxt*f-dyA{q?-3cVfo?LVDbDpz$1EMUrNBYbj=8nVs>$tJ+|` zsXI{EBFDokV>jL5CDOi%&#Q|Ok>JtskM|d=HY0s`*-t>@ruVzu@=wKEUEtqNL|Nv1 zozj_wA9BPJL)GJrlLF03Z2wzp=NZ+6)2;ice^dlPI!HAX6%eFL2SKD4=`{$14xzUM zBB&Ip(mT?ncS7&IO79>o^iBvNKrZk3a_+hB`{k~6zV0<^X3dxV>}U4;W?r7GP8Fd$ z$y_+(wHI2*UV89F-(x@O-uXqqU0I)#+M?O2(YaV1+@Kj~9ay}eae31aLd2_%5wYI6 z&GNU~x_V8fbp>xdLJ}H_47PgouyJyh& zIv;kqdxwVuq`)ROu7-}dsddpwiIjxWI!4WoyY9YRt7^k5X6#?TPyc8_23a_)e6=}x zuypq*C{kip?JfQ=Ku5NNp)VvqJQj!ga57bKvz>jDDy#r+gbjIy3*Z3&@8jEtqq0cH zLpRd|iqoB!6$&tW$15MS#%olsvwn>0nvh4J%AfAbHb0JBp*PV}-xHRP4{NA4>h(J` zE;{|zPM)WIWPZZ_y#sP#u<-P*S)k~5DMo`}a1+jVn(7NgzCh8_lY6#=tk;Y5{mC7J zj1$tod_~$3MvEoxo>eyHT}qAfg&&oYsfAm5aoktmL4O_2AHH?3ysxl@r(5E0Bk8jf zwFok4C{9`*EcMbj{)-IVKlF8z|J&X4W5SK$w??DCjO(~-?1Mb+x2E{xWsoJ! z$$ZC?KYJ22D{fDDZw96vtQbW{jta?r545URHv|YcX}+H*7=cOu(QwayD^T(#H=;X_ zfPRQcfK5{&n^!P>Z)<>EA((^rz7ujPU&#kWPp)OYBF3UR2x0Pw zhGJO1S%t12SL3;LqA`iawXN_~>3RswEwQ9nxCSk5uzh1pgOd3)Zn%yn*%dXX1c zli{&2GWXTlE!Lt}tWN!7Kt9rGu93defGMCp`(TRR0fMDvFph1QhHcOJNWWXy-lQKf zK{Ri~tf@3_#Ww^RoXt?D&Q)|k4no6Dm1io&wk)TjgF>wTPOW%9XXi2q4DTCK*QT*s zVwqK=q3z(C;15Hr{*hK1=~!6v)t9qP?;0~nb;D>CTj0I(fc4{o z7f@HlrbdE;@Az7Y%SwKfNcXMmczM4tiNj|8(EV(c{*3sX1j5>yL{`7(TBIO%g>86Q zNx`*NQ21G-(&IQjW`ulJjQN3kjkwr~zPmvJF6J0n_)tiAuV?{Cw!X1E5kz#JGt?~p zMvCi%N4en)c|6~dZ7fDYLYoNPn>2k*QeQ;G;H+X)$0VT6rSW`x0%$Q*j>tYatJc=x zCyoZWeacB*6%8dwA>HCuoKcWp%McI;m!D34LG1Ol7QKh)3o_5^vTJX!+7lX{ z>SvgD_(>No$m!{#4tB0rVah}dy^D$#7X!=1{wX#|Z0Ks6ii z$-$fG?4ZfSXh9vi>K>8CN)T4?f^DNxS=rtR152_m(2Q|n)w$kSlM^1OlC zhu+95*^mjiw((?+6{M0LE7Xo!9z!k!IOJ;k>m%@t&U?}|F8lf&s|W&`GXHj#JZkhc zCpFjV@)kD%3feB0&HR?c?AN@M9Jd&`*~zle7$7l(twm=GG8WZr)Y;Y7QM|4k56~>( zDs6c2*4aOKwMgY_OJEyc99YZW|A{N8Rq8oVE|a>!mY~)zhJ)#5t)Ok&>UQ_VoK=P+ z%(0Q*W_qo=suzVuiL%$W9^V0+$W{TrE@7)U9+AM7W~@g-hS&{}ek<3Gt=Iyn6H^3qJQtO^ogBN$(hezF7tJVe z^!A~`?$PKQZprt7MSYr(-CS0l<`B5aRquKT>#5J8LrF;)Y|K>5P|pc^LmIu(pD_53 znz;(<%$DTCf7LxRH-o#P*F7ztO`Yw%O-XwV+>r(0Q=!(8Y-P`Sy*IF>u!H_`?vH-LN-EGYwfcKbEbGz4yhBt>Hw47dztzvJy1 zgIVS%2(&OVAwqlf?^vk0OHG$hsnM*7&NomS=P`nC{i0CTK?baE;g8i6Plj7hw0cQ( zh@^g!*F;uNGoDW1;v@T~Kq9XrfPG8q}v$}f(e{x_g_eeJ_T1au74X;wxAnnLh ztt=EsF3U3O<3pd!a!}s$<9!Ko$oEDJhB{daagm$%bEKmk8P%9_Ac-FJ_6-CtGK?nCm!4Zy;pRfeEH=A+UAktG>_Xug;=JJClYX^x zXnyBD-BpbCQmm+>p!+oao~>BbBTK2Z6K8IiP zTrXmgTmN{%ytmtJ6Qshl3L4=GSL569WckT6E%VB<8{064k6U(I&2@i_HBp1fg;ntR ziv!6D2+muS4pZsWJq6eNqFTjcZrXVy_B2k0X1(;CSox}_u2xv+fbx2HqeR&su*D^x zY*+V&iUuWQ#dmyzvd_+;2vTF@ElEh5oKnPlcvbx=Mc~|a>!db;B7@<$?vbtJir=5~ zp9!VFl;II4&Y!*Wu)1H>K`(*rF19OFy`pLN*U6}};?Be*T?k0Xq7r{Qa$e{00VTq~ zU&+khfU)ckdsyY1WR2XGwQ#3uo^dD<@rw)Qg%<0Gv}Ahz{cQHoQDql8O!cpRq&sSc zoLonE1fDVy_#lJPvGyd)$m;R=i*zd)m%KpTgJqrZ9r9pLw<#g?S=U3gp-{)gs!gew z?)8dVI*!79s@XOsxRQ!@^OS?b>-kgg0eJLz_J!sJqSnAGvR6hnjNL)e1>0T{)EM)! z%lJ26Aii28sL%@M>K9aE2%PyS5q0<#g3Nte`3nBJ_vxEAO!BbU)lW(vh#wyHzN)tD zc{UL<=&pu~3BJm}O;J#-WmS$ZLJ6)ZZ}yeBC1c~l}1!)@LN?DD8Cr5Wk){2$>ycr4u4Q75K0($kHce8Z1CLE5BZUl} z6&I|>sBpAZCXPv;8Y}?j7aLKGR;Y9$o@rQrN_AJ$n2e>yCn5Vuz0`vCx^7-)k%6qn zKRQIg>dtW2C-ezw@-DZ&t%(fpnnc2mx+sc71#xGalCYtNY@>-hFPgB|^cyaA{f(mz z0*(3~~k-h6t8h(RbF|Gfb&ly*(FyIub2#!zStKT55`ZY|{Hz zHzUDer@d~Px|^C~_hTc`OjGqn;*oK!U4LBs(|MOGDC6b;er+~H+?UCDsT0$1#DV2E?y%`lEG~W1YaJfS?YEZ@9;mU zJItKe4{%IXn+aJHA;0o~7CS{Shx3ut#e45YUB^ z$un?-Tr|aKh&z{^e6?^D|GFSQR4sma2>bvfHDXcF)l*IBATn z&cl(z>+)L+)z;J=F;&^?O0SP}ZoRcKID~$xIVlNA(L`A)o$!aR`Qi^2x69p-?jvi* z$CW=*mL8}&FVKW7dV0i{{SE?rvAb_(IYdH75BJIUzWx#7xktS`dD(`H-w-|XqaBGZ z+UrLc@*a*fq$%UB@|<;Vr1De3!$PrT!hx?M?BjZJ1(HABe^@J|x4@~~GdU@ldqob{ zK3D!e(N5P`6+4&`gW!s11+EQ4T0mDCh#(L8YlPNW5rxee`9&GA4y2G_dkuV2K|;J4 z)D2=v3Jz}i+DuEZi>{tcb$DF7)>a@Oq<9!|DN!a~1>-YI{iJg7!WT@J49fZ{6%J|W^ zqN?CRlkB0YW^M+T=5RSfBnxbjKyq}YN`$p08#(+Ot=`!+HmUCz47b_bP;rGR5evq7 z%{I+>@0rzahmhU6<0koNWMqqx37)ybXK|y=zPk~iyiv`w+(+Tuo;D2icJmS1ulb7e zXMC3&T1+*A5KXOEi=Ut&4!gY8*0-qw@i+C0?PT7KDYu_C(i`7;4wjv!E9qe&O|S=;lK1{vqTdXC&lOC;2Y{1K` zpBf6>0n)6wNr%P=__$1>ykZqITLvZgdphv`S)s{}A}x5&KjsK+Tpu9XI$Y3iA59{S z%QVZCXd%e|Zf9pmJj-34o!{)>32!TGlKL8}jSX7NDB*guXHU_$Bs80c8oe+NiL?61 zUN~P&Cj^t1W2BW(>Lsbb&$NAB?uq+F_77l&v}=gEOICI}_8`w765~}SB5IOgFAyhU z)T5(o`>pI-Fyg{tUK_SD(x7IzuNruAe0^MdZ%{F~se?j*#w)0*H~TS4l#H-ABU0MQ zL!VoH+Ri;$OCqr9rr7T}WA4=0n%8G=bKy0`M8hkHL9_DC6!jC!F{ zltI5(YkqWcKOO(EnwOYTKWWIjkf(ss*Ve;f3aOT6!OeZv(LuJ8gb9?T#cyl1ZQN*{ z0R0)Op?dKz{Er;$7UniuEIPl8{bmstr>tsg98H@Xl6RLl3}nbp*;*pSVHAcEf}Sgt zG%ZNf-AE~c?6=)AAZW0DU{gSXJgHgTFao`lmF^(~+1c|d>55K%PCgQaC~{x;bxRyt zDa4s_JfzipFXJ`f-6Jl1bJ9+*EW4Uuqh<#M=TAYSB6}Ws1t!L&r;+B=uE-`ihpsq(&ypi9T~gp@SfPoIYceI4R%hMTtM z#bD!j;3*Vthoi<8?YA`XJqe2RVq1+a(u(Qzw?Yt#Wt4NM(3^u0e#ZFVGvd?@N1tO< zK*|i&Vr8Zi=Fv-p=TlrJ5n!>L+WfE4*_8+bvt()Ey;_! z6fGqie0P)R8OdGd2FQL(y!YSXBpwAP`q!NGXHx;*IQ!yWvmVJ<^_JG{i&5xewlVP+ zS~4@sYW&i)g(nOWt74uC=F8)#NV1Ns##2wukg)nTgMP_vFH}(I47q;!HZ|b--7`M( z=n03<6dKQUI(QOPXr${Z9}T90oxMuWw68vjjUw6a&M071dU&QoB=+=b4tB+!r=u+< ziNbHTFm5)+-or(#;sSzfeb3ITk}9g)I8PoxuCtTb@DTKN!nt8yJ49b=ig$C@kz9>c zgUHR0kW_x>2`%lL;{dI5?J+(I)km)TBcHe+s>|^7Mf)Otu9C59g9V&(cFpjMMsFP# zKlr*~9MY0j$Xo8}h?FJh0(REG?z`?LiBICK!VM{o9v$>$`i4j&4{PUBX6TPt3$v}VmJ%5782%n9YpHHIC5R2qa zX4qBc*WNf$?Ve-gQ`*S5oQ3SeUI8cOVZC6jJo4?4?4 zZK3m#t`?=@^@p@aO9U<;!oO+^;uw(V?tR@JD<|0|FqUUHgG$A3An3#+;}-lAJF;1S z=DP%f`@wXb=0Uu%@eMzI;+wd>C-MNiLwMS5Z?FgdcZ`tnHQj?KKnC zI4vbuwpN?s%0T>AM3s7ml3%SAYGm(ucJ*W@IYTAowWn_FyRR%82O{uLt#pda%a5UR zNrefh6jjBz^!VFl1>5EYSkp)G7g`;})e?vzZ6Us!X0L8j^QDZ7*!~2I6?%Eu_cjW4 zJz4likCdpFD={F7@BRwhC1a1~R8r9A$H6pT?#QC53KgdVA&2CA4Tv>kLJ+(Au$zdPTPCdk^L#TD|%g%Xb&>cS``3W(a95=<6+1RniRj=TvFzsV5 zIt8eV=j@%2=uNBtE(q1)mvRw&w;tv48e;E&H5-4G2|eT+sG?HSkK%Ivwe=;0s_EjU zW}5n|flEO^LMQKvpqrjf$KxicuB+u}&Nqd;!d`>z6GM|;E1}$|(O2N&;Z>48XhYWS zDmp?OG;VB1#lmvO%GRuoauVul>0YlLtZgYO`*z^f%71mY;i?+j7p$$*1fJ{r$43)E zT#J$jCcg8%Kl-JadvYQ^5xYkCyujvNQZ8B+Mk~wci%JY#Z1petMjXqp9 z8y}qn!Ssxs1kb%6T$4}ETqE9ZIS{;*fV(aZkeA?+NW<7z&ND?_RzP%z;uz~Oeg zo5&X)01sa+Pvwry)$({lr09}kHe!e2DH|t@I5eB^aV7xSCYp^8gwW z5GKdEvs00Xw|qli)=>=kW7NEp{a`6w&v!qVmg!(Zv;u&*)u+~(%ZOQa*w6Gjisdgxa-g4NY6}BF=ZK|xy8}^>ssxJUuO?B>x(Nfn^EXTWnYt))~cIzkzRL+dLmQ8 zPVz4msc2EKZE8?(QZ-rlWbWwvnnzCX&4;R0vcZn))rm*J!5Z>IU@(X0f){A%;Ovtl+FZ|l zc6avlDJ{CSaC|YEHg#`8Nj5B&_IGKMXX`|_eAXJ-?K6(g%K!49>UF9&M-OfMDwFTZ z5+&D32r3+u&jd6R$W&WA)QA5%FKuS1*MaUWRyUqA8(4qBVYkAet3{_^R+yCD_P{?5 z6`PIeUVu80|67L(d#OaidS3c4gIW~wfon?AAJ;>c_iuvM2pt0&UfUZXU7ZWBvAuTS68meo}hp z`Jvf-gkx0wq@1A-0L*u;N~A4ESvj?;?65stfcN!adFA G0sja5To1ee literal 0 HcmV?d00001 diff --git a/brainsteam/content/posts/2023/01/02/caddy-firefly/index.md b/brainsteam/content/posts/2023/01/02/caddy-firefly/index.md new file mode 100644 index 0000000..191d0a4 --- /dev/null +++ b/brainsteam/content/posts/2023/01/02/caddy-firefly/index.md @@ -0,0 +1,38 @@ +--- +title: "Caddy Firefly" +date: 2023-01-02T12:38:40Z +description: banging my head against walls so that you don't have to +url: /2023/1/2/caddy-firefly +type: post +mp-syndicate-to: +- https://brid.gy/publish/mastodon +- https://brid.gy/publish/twitter +tags: + - foss + - software + - devops +resources: + - name: feature + src: images/insecure.png +--- + +## Setting up HTTP(S) and Firefly III with Caddy + +Today I'm experimenting with Firefly III [the brilliant, FOSS budgeting app from James Cole](https://github.com/firefly-iii/firefly-iii/) which I'm hoping will be a YNAB killer for me. + +### The Issue + +The app is running on a Raspberry Pi and there's a Caddy reverse proxy with SSL etc enabled running on my internet-facing server. I've been banging my head against the wall a bit because when I loaded the app, some of the content was being rendered via insecure http links which the app seems to have rendered. + +![a screenshot warning the user that the site is insecure](images/insecure.png) + +This meant that I couldn't register (and shouldn't because someone could be snooping on the unencrypted POST request). + +### Fixing The Problem + +I went to the documentation and tried messing with the `APP_URL` environment variable which the docs tell you not to bother with because it doesn't do anything useful. As expected, it didn't do anything useful. + +I did a little bit of digging and it looks like Laravel, the framework that Firefly III is built on top of can detect whether or not it should render HTTPS links via the `X-Forwarded-Proto` header which is set automatically by caddy to tell it that the original connection was made over HTTPS (even if the connection between caddy and firefly is not encrypted because they're on the same machine etc). I spent a long time trying to work out why this wasn't enough and playing with manually overriding this header in my caddy file. + +Then, I found [this](https://firefly-iii.readthedocs.io/en/latest/support/faq.html#i-can-t-seem-to-get-https-working-with-caddy). By default Firefly does not trust incoming connections from other downstream HTTP proxies (which is a good default because you could have a situation where a man-in-the-middle manipulates this value). We can set the value to `**` which means trust anything but a more secure option is to use the IP address of the machine that is running caddy. +