@crossdelta/infrastructure 0.11.9 → 0.12.1

package/dist/index.cjs

@@ -1155,9 +1155,7 @@ var basicAuthLines = (basicAuth) => basicAuth ? ["basic_auth {", `  ${basicAuth.
 var generateHandleBlock = (handle, level, basicAuth) => {
   const hasPath = handle.path != null;
   const header = hasPath ? `handle ${handle.path}* {` : "handle {";
-  const body = [
-    ...basicAuthLines(basicAuth)
-  ];
+  const body = [...basicAuthLines(basicAuth)];
   if (handle.redirect) {
     body.push(`redir ${handle.redirect} permanent`);
   } else if (handle.upstream) {
@@ -1268,7 +1266,7 @@ var deployCaddy = (provider, namespace, config) => {
   }, { provider });
   const caddyContainer = {
     name: "caddy",
-    image: "caddy:2-alpine",
+    image: "caddy:2.11.2-alpine",
     ports: [
       { name: "https", containerPort: 443, protocol: "TCP" },
       { name: "http", containerPort: 80, protocol: "TCP" },
@@ -1327,6 +1325,7 @@ var deployCaddy = (provider, namespace, config) => {
       namespace,
       labels,
       annotations: {
+        ...config.tlsPassthrough && { "service.beta.kubernetes.io/do-loadbalancer-tls-passthrough": "true" },
         "service.beta.kubernetes.io/do-loadbalancer-healthcheck-path": healthCheck.path,
         "service.beta.kubernetes.io/do-loadbalancer-healthcheck-protocol": "http",
         "service.beta.kubernetes.io/do-loadbalancer-healthcheck-port": String(healthCheck.port),

package/dist/index.js

@@ -1059,9 +1059,7 @@ var basicAuthLines = (basicAuth) => basicAuth ? ["basic_auth {", `  ${basicAuth.
 var generateHandleBlock = (handle, level, basicAuth) => {
   const hasPath = handle.path != null;
   const header = hasPath ? `handle ${handle.path}* {` : "handle {";
-  const body = [
-    ...basicAuthLines(basicAuth)
-  ];
+  const body = [...basicAuthLines(basicAuth)];
   if (handle.redirect) {
     body.push(`redir ${handle.redirect} permanent`);
   } else if (handle.upstream) {
@@ -1172,7 +1170,7 @@ var deployCaddy = (provider, namespace, config) => {
   }, { provider });
   const caddyContainer = {
     name: "caddy",
-    image: "caddy:2-alpine",
+    image: "caddy:2.11.2-alpine",
     ports: [
       { name: "https", containerPort: 443, protocol: "TCP" },
       { name: "http", containerPort: 80, protocol: "TCP" },
@@ -1231,6 +1229,7 @@ var deployCaddy = (provider, namespace, config) => {
       namespace,
       labels,
       annotations: {
+        ...config.tlsPassthrough && { "service.beta.kubernetes.io/do-loadbalancer-tls-passthrough": "true" },
         "service.beta.kubernetes.io/do-loadbalancer-healthcheck-path": healthCheck.path,
         "service.beta.kubernetes.io/do-loadbalancer-healthcheck-protocol": "http",
         "service.beta.kubernetes.io/do-loadbalancer-healthcheck-port": String(healthCheck.port),

package/dist/runtimes/doks/caddy.d.ts

@@ -32,7 +32,7 @@ export declare const generateCaddyfile: (config: CaddyConfig) => string;
  * Deploy Caddy as a reverse proxy to the cluster.
  *
  * Creates:
- * - Deployment with `caddy:2-alpine` (Strategy: Recreate for RWO PVC)
+ * - Deployment with `caddy:2.11.2-alpine` (Strategy: Recreate for RWO PVC)
  * - LoadBalancer Service with DigitalOcean health check annotations
  * - PVC for cert persistence (`/data`)
  * - ConfigMap with the generated Caddyfile

package/dist/runtimes/doks/types.d.ts

@@ -461,6 +461,8 @@ export interface CaddyConfig {
     };
     /** Response encoding (e.g., ['zstd', 'gzip']). Omit to disable. */
     encode?: string[];
+    /** Pass raw TLS to the backend without LB termination. Only needed when the LB itself manages HTTPS. Defaults to false. */
+    tlsPassthrough?: boolean;
 }
 export interface CaddyResult {
     /** The Kubernetes Deployment */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crossdelta/infrastructure",
-  "version": "0.11.9",
+  "version": "0.12.1",
   "type": "module",
   "license": "MIT",
   "publishConfig": {
@@ -35,7 +35,7 @@
     }
   },
   "dependencies": {
-    "@crossdelta/cloudevents": "^0.8.1"
+    "@crossdelta/cloudevents": "^0.8.2"
   },
   "peerDependencies": {
     "@pulumi/digitalocean": "^4.0.0",