Caddyfile.dev

http://localhost {
	# --- API ---
	handle /api/v1/* {
		reverse_proxy server:3001
	}

	# --- Клиент ---
	handle {
		header {
			-Server
			-X-Powered-By
			X-Content-Type-Options "nosniff"
			Referrer-Policy "strict-origin-when-cross-origin"
			Permissions-Policy "geolocation=(), microphone=(), camera=(), payment=(), usb=()"
			Content-Security-Policy "default-src 'self'; base-uri 'none'; object-src 'none'; frame-ancestors 'none'; form-action 'self'; img-src 'self' data: blob: https:; font-src 'self' data:; media-src 'self' blob:; worker-src 'self' blob:; manifest-src 'self'; connect-src 'self' http://localhost:3000 http://localhost:3001 ws://localhost:*; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval';"
		}
		reverse_proxy client:3000
	}
}