am-d-model.eu/caddy/repo.caddyfile

(repo_cors) {
    header {
        Access-Control-Allow-Origin  *
        Access-Control-Allow-Methods "GET, POST, PUT, PATCH, DELETE, OPTIONS"
        Access-Control-Allow-Headers "*"
        Access-Control-Allow-Credentials true
        Strict-Transport-Security "max-age=15768000"
        # Request ID tracing
        +X-Request-ID {uuid}
    }
}

(repo_common_proxy) {
    # Set headers similar to uwsgi_param
    header_up Host {host}
    header_up X-Forwarded-For {remote_host}
    header_up X-Forwarded-Proto {scheme}
    header_up X-Request-ID {uuid}
    # Remove sensitive headers
    header_down -X-Session-ID
    header_down -X-User-ID
}

(repo_site) {
    import repo_cors

    # UI Server routes
    handle / {
        reverse_proxy repo-web-ui:5000 {
            import repo_common_proxy
            max_upload_size 100mb
        }
    }

    # API routes
    handle /api/* {
        reverse_proxy repo-web-api:5000 {
            import repo_common_proxy
            max_upload_size 100mb
        }
    }

    # Large file upload API routes
    handle_path /api/records/*/draft/files/*/content {
        reverse_proxy repo-web-api:5000 {
            import repo_common_proxy
            max_upload_size 250gb
            encode gzip
        }
    }

    handle /static/* {
        root * /opt/invenio/var/instance/static
        file_server
    }

    handle /robots.txt {
        root * /opt/invenio/var/instance/static
        file_server
    }
}