Usage behind reverse proxy

[Cilenco]

First of all thank you for this awesome project!!

I would like to use this server behind a reverse proxy (in my case Caddy) which already handles SSL certificates for me.
It would be great to have a mode "reverse proxy" or so in the tls config section and then let the reverse proxy talk via http to the server.

Would something like this be possible?

[f-gdovin]

I have Caddy as well and this is working for me:

in local_roborock_server's config.toml:

[network]
stack_fqdn = "api-roborock.REDACTED.dev"
bind_host = "0.0.0.0"
https_port = 555
mqtt_tls_port = 8881
region = "us"

[broker]
mode = "embedded"
host = "127.0.0.1"
port = 18830
mosquitto_binary = "mosquitto"
enable_topic_bridge = true

[tls]
mode = "cloudflare_acme"

in Caddyfile:

// rest ommitted

*.{$DOMAIN} {

    @roborock host api-roborock.{$DOMAIN}
    handle @roborock {
        reverse_proxy https://roborock-local-server:555 {
            header_up Host api-roborock.{$DOMAIN}
            transport http {
                tls
                tls_insecure_skip_verify
            }
        }
    }

    // other (non-HTTPS) service for reference
    @homeassistant host homeassistant.{$DOMAIN}
    handle @homeassistant {
        import authelia_auth
        reverse_proxy homeassistant:8123
    }

[Cilenco]

Sure this works!

The point is that you still issue different certificates, one for this server and the other from caddy. This is unnecessary as traffic is routed through caddy and therefore is already using https. Caddy could talk to this service through http, the server itself does not need to create certificates at all and all https stuff is handled by caddy.