Build [v1.9.10] (Access & SSL Recovery: Fixed Admin info and Explicit IP Proxy)

config/Caddyfile

@@ -1,13 +1,21 @@
-# TFM aInventory - Caddy Static Internal Configuration
-# We use standard ports 443/444 internally to decouple from host-side dynamic ports.
+# TFM aInventory - Caddy Explicit IP Configuration
+# Version 1.9.10 - Focused on resolving Protocol Errors on private IPs.
 {
-https://:443 {
+    # Global options
+    admin off
+    # Disable automatic HTTP->HTTPS redirects to prevent port conflicts on non-standard ports
+    auto_https disable_redirects
+}
+
+# Frontend SSL Proxy - Explicit address to improve handshake success
+https://{$SERVER_IP:192.168.84.113}:443 {
+    tls internal
     reverse_proxy frontend:3000
 }
 
 # Backend SSL Proxy
 https://{$SERVER_IP:192.168.84.113}:444 {
-https://:444 {
+    tls internal
     reverse_proxy backend:8000
 }
 }

config/ldap_config.json.example

@@ -1,19 +1,17 @@
 {
-  "_comment": "Copy this file to ldap_config.json and fill in real values. NEVER commit ldap_config.json to Git.",
   "ldap_enabled": false,
-  "server_uri": "ldap://YOUR_LDAP_SERVER_IP:389",
-  "base_dn": "dc=yourdomain,dc=com",
-  "user_template": "cn={username},ou=people,dc=yourdomain,dc=com",
-  "groups_dn": "ou=groups",
+  "server_uri": "ldap://192.168.1.100:389",
   "use_tls": false,
   "ignore_cert": false,
+  "base_dn": "dc=example,dc=com",
+  "user_template": "uid={username},ou=users,dc=example,dc=com",
   "role_mappings": [
     {
-      "group": "inventory_admins",
+      "group": "cn=inventory_admins,ou=groups,dc=example,dc=com",
       "role": "admin"
     },
     {
-      "group": "inventory_users",
+      "group": "cn=inventory_users,ou=groups,dc=example,dc=com",
       "role": "user"
     }
   ]