halkyon/deploy/sidecars/meditate.caddy

# Halkyon Meditate's site (compose.meditate.yaml, ADR 0038, step 7): its API server, its
# register's pages, and the operator's library's files from its web server (D16), which
# serves them only with an access its catalogue gave a person signed in.
{$MEDITATE_DOMAIN} {
	encode zstd gzip

	# Recordings and pictures, served by ranges (encode leaves audio and pictures
	# as they are).
	handle /library/* {
		reverse_proxy meditate-server:8082
	}

	# Its register's pages (Halkyon Days' ADR 0045, D20), on its web server: the
	# profile pages (`/@handle`), the privacy page and SimpleLogin's forwarding page.
	# Never the calls between servers (`/halkyon-base/…`), which nothing makes now.
	@register path /@* /privacy /simplelogin-callback
	handle @register {
		reverse_proxy meditate-server:8082
	}

	# Serverpod's streaming methods use WebSockets; reverse_proxy upgrades them as-is.
	# The visitor's address comes last in X-Forwarded-For, as for Halkyon's server.
	handle {
		reverse_proxy meditate-server:8080
	}
}