From 71cd4fd04dbc25c666626358fe83976a7fe6c03e Mon Sep 17 00:00:00 2001
From: rafapolo <rafael@extrapolo.com>
Date: Sat, 28 Mar 2026 13:01:29 +0100
Subject: [PATCH] fix: use explicit HTTPS site blocks for each domain

---
 Caddyfile | 24 ++++++++----------------
 1 file changed, 8 insertions(+), 16 deletions(-)

diff --git a/Caddyfile b/Caddyfile
index 23df4b4..5dc770d 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -1,23 +1,16 @@
-:8080 {
-    handle /health {
-        respond 200
-    }
-
-    # ask.xn--2dk.xyz - Natural language to SQL TUI
-    @ask_host {
-        host ask.xn--2dk.xyz
-    }
-    @ask_ws {
-        header Connection *Upgrade*
-        header Upgrade websocket
-    }
-    handle @ask_host {
+https://ask.xn--2dk.xyz {
+    handle / {
         reverse_proxy localhost:7682 {
             flush_interval -1
         }
     }
+}
+
+https://db.xn--2dk.xyz {
+    handle /health {
+        respond 200
+    }
 
-    # db.xn--2dk.xyz - DuckDB SQL shell
     handle /login {
         reverse_proxy 127.0.0.1:8081
     }
@@ -46,5 +39,4 @@
             flush_interval -1
         }
     }
-
 }