Add cloudflare support to docker with Caddy

.github/docker/Caddyfile

@@ -1,6 +1,5 @@
 {
     admin off
-    email {$ADMIN_EMAIL}
 }
 
 {$APP_URL} {
@@ -9,4 +8,9 @@
 
     php_fastcgi 127.0.0.1:9000
     file_server
+
+    tls {
+        dns cloudflare {$CLOUDFLARE_API_TOKEN}
+    }
+
 }

.github/docker/Caddyfile_ssl

@@ -0,0 +1,17 @@
+{
+    admin off
+    email {$ADMIN_EMAIL}
+}
+
+{$APP_URL} {
+    root * /var/www/html/public
+    encode gzip
+
+    php_fastcgi 127.0.0.1:9000
+    file_server
+
+    tls {
+        dns cloudflare {$CLOUDFLARE_API_TOKEN}
+    }
+
+}

.github/workflows/docker-publish.yml

@@ -4,7 +4,9 @@ on:
   push:
     tags:
       - "v*"
-
+  release:
+    types:
+      - published
 jobs:
   build-and-push:
     name: Build and Push

Dockerfile

@@ -11,11 +11,14 @@ RUN yarn config set network-timeout 300000 \
     && yarn install --frozen-lockfile \
     && yarn run build:production
 
+FROM caddy:builder AS xcaddy
+RUN xcaddy build \
+    --with github.com/caddy-dns/cloudflare
+
 FROM php:8.3-fpm-alpine
 # FROM --platform=$TARGETOS/$TARGETARCH php:8.3-fpm-alpine
 
 ENV CADDY_ADMIN=off
-ENV [email protected]
 
 COPY --from=composer:latest /usr/bin/composer /usr/local/bin/composer
 
@@ -28,6 +31,9 @@ RUN apk update && apk add --no-cache \
     caddy ca-certificates supervisor \
     && docker-php-ext-install bcmath gd intl zip opcache pcntl posix pdo_mysql
 
+# Copy the binary with plugins
+COPY --from=xcaddy /usr/bin/caddy /usr/sbin/caddy
+
 # Copy the Caddyfile to the container
 COPY .github/docker/Caddyfile /etc/caddy/Caddyfile
 

compose.yml

@@ -3,6 +3,7 @@ x-common:
     &panel-environment
     APP_URL: "https://localhost" # can be set to 'http://localhost' on port 80 only
     ADMIN_EMAIL: "[email protected]"
+    CLOUDFLARE_API_TOKEN: "" # see https://pelican.dev/docs/guides/ssl#obtaining-cloudflare-api-token
 
     APP_DEBUG: "false"
     APP_ENVIRONMENT_ONLY: "false"