Server Setup

Server Details

Caddy Configuratie

Caddy beheert alle routing op de server. Volledige config: infrastructure/roosevelt-dev/Caddyfile

Automatische HTTPS: Caddy haalt Let's Encrypt certificaten automatisch op voor alle geconfigureerde domeinen.

Security Headers (elke virtual host)

header {
    Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
    X-Content-Type-Options "nosniff"
    X-Frame-Options "SAMEORIGIN"
    X-XSS-Protection "1; mode=block"
    Referrer-Policy "strict-origin-when-cross-origin"
    -Server
}

PM2 Processes

pm2 list              # Overzicht alle processes
pm2 restart api-production
pm2 logs api-production
pm2 monit             # Real-time monitoring

Wildcard DNS

Cloudflare beheert DNS. Een wildcard A-record dekt alle subdomains:

*.roosevelt.dev → 91.98.168.21
roosevelt.dev   → 91.98.168.21