From 0deef7f6011d590f9ed4eb52bbfc5543a6fb742b Mon Sep 17 00:00:00 2001
From: Daniel Bedeleanu <bede@tfm.ro>
Date: Wed, 22 Apr 2026 19:23:12 +0300
Subject: [PATCH] fix(6): make Caddy listen on any IP/hostname for HTTPS
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Changed from localhost-specific to wildcard listening:
  - https://:8918 (any IP on port 8918) → backend
  - https://:8919 (any IP on port 8919) → frontend

On-demand TLS generates certificates for any accessing IP/hostname
Self-signed certs now work via:
  - localhost
  - 127.0.0.1
  - 192.168.x.x (or any IP on network)
  - Any hostname

Tested and verified working via 192.168.84.131:8919
---
 Caddyfile.standalone | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/Caddyfile.standalone b/Caddyfile.standalone
index 43454558..3160818c 100644
--- a/Caddyfile.standalone
+++ b/Caddyfile.standalone
@@ -1,5 +1,5 @@
 # TFM aInventory - Standalone Caddy Configuration
-# Self-signed SSL/TLS reverse proxy for localhost deployment
+# Self-signed SSL/TLS reverse proxy for any IP/hostname
 
 {
     admin off
@@ -11,8 +11,8 @@
     }
 }
 
-# HTTPS Frontend (port 8919 -> 443)
-https://localhost:8919 {
+# Dynamic HTTPS Frontend (port 8919) - Matches ANY IP or hostname
+https://:8919 {
     tls internal {
         on_demand
     }
@@ -27,8 +27,8 @@ https://localhost:8919 {
     }
 }
 
-# HTTPS Backend (port 8918 -> 444)
-https://localhost:8918 {
+# Dynamic HTTPS Backend (port 8918) - Matches ANY IP or hostname
+https://:8918 {
     tls internal {
         on_demand
     }