# Caddyfile — rendered by phase8_cutover.sh
# TLS_BLOCK is replaced by the phase script based on TLS_MODE:
#   cloudflare → dns cloudflare {env.CF_API_TOKEN}
#   existing   → tls /path/to/cert /path/to/key

${GITEA_DOMAIN} {
${TLS_BLOCK}
    reverse_proxy ${GITEA_CONTAINER_IP}:3000
}