From ab21a33e6f4cb6b6d6d61b23ce40bb5203d30cb6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vi=CC=81ctor=20Falco=CC=81n?= <victoor89@gmail.com>
Date: Sat, 17 Jan 2026 20:02:14 +0100
Subject: [PATCH] chore: Fix caddy container

---
 Caddyfile                      | 22 +++++++++---------
 docker/caddy/generate-certs.sh | 41 ++++++++++++++++++++++++++++++++++
 2 files changed, 52 insertions(+), 11 deletions(-)
 create mode 100755 docker/caddy/generate-certs.sh

diff --git a/Caddyfile b/Caddyfile
index 1225c488..76b2d84d 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -1,16 +1,16 @@
 whisper.money.local {
-    # Use mkcert certificates (generated by setup script)
-    # These certificates are automatically trusted by browsers
-    tls /etc/caddy/certs/whisper.money.local.pem /etc/caddy/certs/whisper.money.local-key.pem
+	# Use mkcert certificates (generated by setup script)
+	# These certificates are automatically trusted by browsers
+	tls /etc/caddy/certs/whisper.money.local.pem /etc/caddy/certs/whisper.money.local-key.pem
 
-    reverse_proxy php:8000
+	reverse_proxy php:8000
 
-    header {
-        -Server
-        X-Content-Type-Options "nosniff"
-        X-Frame-Options "DENY"
-        X-XSS-Protection "1; mode=block"
-    }
+	header {
+		-Server
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "DENY"
+		X-XSS-Protection "1; mode=block"
+	}
 
-    encode zstd gzip
+	encode zstd gzip
 }
diff --git a/docker/caddy/generate-certs.sh b/docker/caddy/generate-certs.sh
new file mode 100755
index 00000000..2e4c9f7b
--- /dev/null
+++ b/docker/caddy/generate-certs.sh
@@ -0,0 +1,41 @@
+#!/bin/bash
+
+set -e
+
+certs_dir="$(dirname "$0")/certs"
+domain="whisper.money.local"
+cert_file="${certs_dir}/${domain}.pem"
+key_file="${certs_dir}/${domain}-key.pem"
+
+mkdir -p "$certs_dir"
+
+if command -v mkcert &> /dev/null; then
+    if [ ! -f "$(mkcert -CAROOT)/rootCA.pem" ]; then
+        echo "Installing local CA..."
+        mkcert -install
+    fi
+
+    echo "Generating certificates for ${domain}..."
+    mkcert -cert-file "$cert_file" -key-file "$key_file" "$domain" "*.${domain}"
+    echo "Certificates generated successfully!"
+    echo "Files created:"
+    echo "  - ${cert_file}"
+    echo "  - ${key_file}"
+elif command -v openssl &> /dev/null; then
+    echo "Creating self-signed certificates (browser will show a warning)..."
+    openssl req -x509 -nodes -days 365 -newkey rsa:2048 \
+        -keyout "$key_file" \
+        -out "$cert_file" \
+        -subj "/CN=${domain}/O=Development/C=US" \
+        -addext "subjectAltName=DNS:${domain},DNS:*.${domain},IP:127.0.0.1" \
+        2>/dev/null
+
+    chmod 644 "$cert_file"
+    chmod 600 "$key_file"
+    echo "Self-signed certificates created"
+    echo "Note: Your browser will show a security warning."
+else
+    echo "Error: Neither mkcert nor openssl is available"
+    echo "Please install mkcert (recommended) or openssl"
+    exit 1
+fi