# Caddyfile for Fellowship SUT - PRODUCTION
# Domain will be dynamically set via environment variable CADDY_DOMAIN
# Uses Let's Encrypt Production CA for trusted certificates
# Rate limit: 50 certificates per domain per week
# For local development, use Caddyfile (staging) instead
# For tutorial instances (SUT + Jenkins + IDE), use Caddyfile.fellowship instead

{$CADDY_DOMAIN:localhost} {
    # Let Caddy use its default automatic HTTPS issuers.
    # This avoids hard-failing when a single ACME CA is temporarily rate-limited.
    
    reverse_proxy /api/* backend:5000
    reverse_proxy /* frontend:3000
}