Caddyfile

# SPDX-FileCopyrightText: 2026 Nextcloud GmbH and Nextcloud contributors
# SPDX-License-Identifier: AGPL-3.0-or-later
#
# THIS IS AN EXPERIMENTAL FEATURE
# DO NOT USE THIS IN PRODUCTION, YOU HAVE BEEN WARNED.
{
	metrics
	frankenphp {
		max_threads auto
		max_requests 100

		worker {
			num 2
			file index.php
			watch lib/**/*.php
			watch config/**/*.php
			watch apps/**/*.php
			watch apps-*/**/*.php
			watch core/**/*.php
			watch 3rdparty/**/*.php
			watch *.php
			
			match /index.php/*
			max_consecutive_failures -1
		}
		worker {
			num 2
			file remote.php
			match /remote.php/*
			watch lib/**/*.php
			watch config/**/*.php
			watch apps/**/*.php
			watch apps-*/**/*.php
			watch core/**/*.php
			watch 3rdparty/**/*.php
			watch *.php
			max_consecutive_failures -1
		}
		worker {
			num 2
			file ocs/v1.php
			match /ocs/v1.php/*
			match /ocs/v2.php/*
			watch lib/**/*.php
			watch config/**/*.php
			watch apps/**/*.php
			watch apps-*/**/*.php
			watch core/**/*.php
			watch 3rdparty/**/*.php
			watch *.php
			max_consecutive_failures -1
		}
	}
}

{$SERVER_NAME:localhost} {
	php_server {
		
	}

	log {
		level ERROR
		output stderr
	}

	encode gzip

	redir /.well-known/carddav /remote.php/dav 301
	redir /.well-known/caldav /remote.php/dav 301

	# Rule: Maps most RFC 8615 compliant well-known URIs to our main frontend controller (/index.php) by default
	@wellKnown {
		path "/.well-known/"
		not {
			path /.well-known/acme-challenge
			path /.well-known/pki-validation
		}
	}
	rewrite @wellKnown /index.php

	rewrite /ocm-provider/ /index.php

	@forbidden {
		path /.htaccess
		path /data/*
		path /config/*
		path /db_structure
		path /.xml
		path /README
		path /3rdparty/*
		path /lib/*
		path /templates/*
		path /occ
		path /build
		path /tests
		path /console.php
		path /autotest
		path /issue
		path /indi
		path /db_
		path /console
	}
	respond @forbidden 404
}