Caddyfile

{$DOMAIN_NAME} {
  # HTTPS Options
  tls {$TLS_EMAIL}

  # Test HTTPS setup
  # tls {$TLS_EMAIL} {
  #   ca https://acme-staging-v02.api.letsencrypt.org/directory
  # }


  # Removing some headers for improved security:
  header -Server

  @noRedirect {
    not path /maintenance.html
    not path /offline.png
  }
  @maintenanceModeActive file {
    root /srv
    try_files maintenance.on
  }
  handle @maintenanceModeActive {
    root * /srv
    redir @noRedirect /maintenance.html
    file_server {
      status 503
    }
  }
  # When maintenance ends, redirect stale /maintenance.html requests back to home
  @staleMaintenancePage {
    path /maintenance.html
    not file {
      root /srv
      try_files maintenance.on
    }
  }
  redir @staleMaintenancePage / 302

  # Serves static files, should be the same as `STATIC_ROOT` setting:
  root * /var/www/django
  file_server

  @noStatic {
    not path /static/*
    not path /media/*
  }


  # Serving dynamic requests:
  reverse_proxy @noStatic django:8000

  # Allows to use `.gz` files when available:
  encode gzip

  # Logs, will keep 5 GB
  log {
    output file /var/log/caddyaccess.log {
      roll_size 5000MiB
    }
  }
}