rsp2k/caddy-sip-guardian
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix Caddyfile layer4 network address syntax

Browse Source 
Update to use correct Caddy network address format:
- network/address instead of address/network
- udp/:5060 instead of :5060/udp
- Remove invalid tls subdirective from proxy handler
This commit is contained in:
Ryan Malloy 2025-12-06 16:52:10 -07:00
parent 500185e692
commit a62d1b4064
1 changed files with 9 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
Caddyfile
View File

@ -4,18 +4,18 @@
# 1. Layer 4 SIP proxying with rate limiting and ban management # 1. Layer 4 SIP proxying with rate limiting and ban management
# 2. Admin API for managing bans (internal only) # 2. Admin API for managing bans (internal only)
# 3. Web interface proxying for FreePBX # 3. Web interface proxying for FreePBX
#
# Network address format: network/address (network defaults to tcp)
# Examples: udp/:5060, tcp/:5060, :5060 (defaults to tcp)
{ {
# Enable admin API on all interfaces for docker # Enable admin API on all interfaces for docker
admin 0.0.0.0:2019 admin 0.0.0.0:2019
# Global rate limiting zones
# These are shared across all routes
# Layer 4 Apps - SIP Traffic # Layer 4 Apps - SIP Traffic
layer4 { layer4 {
# SIP over UDP (most common) # SIP over UDP (most common)
:5060/udp { udp/:5060 {
@sip sip { @sip sip {
methods REGISTER INVITE OPTIONS ACK BYE CANCEL INFO NOTIFY SUBSCRIBE MESSAGE methods REGISTER INVITE OPTIONS ACK BYE CANCEL INFO NOTIFY SUBSCRIBE MESSAGE
} }
@ -37,7 +37,7 @@
} }
# SIP over TCP # SIP over TCP
:5060/tcp { tcp/:5060 {
@sip sip @sip sip
route @sip { route @sip {
@ -46,15 +46,14 @@
} }
} }
# SIP over TLS (SIPS) # SIP over TLS (SIPS) - passthrough to upstream
:5061/tcp { tcp/:5061 {
@sip sip @sip sip
route @sip { route @sip {
sip_guardian sip_guardian
proxy tcp/{$SIP_UPSTREAM_HOST:freepbx}:{$SIP_UPSTREAM_TLS_PORT:5061} { # Passthrough TLS - upstream handles TLS termination
tls proxy tcp/{$SIP_UPSTREAM_HOST:freepbx}:{$SIP_UPSTREAM_TLS_PORT:5061}
}
} }
} }
} }