@bender@twtxt.net Sure! 👍

{
    ...
   # Layer 4 Reverse Proxy
   layer4 {
      # Gopher
      0.0.0.0:70 {
         route {
            proxy <internal_ip>:70
         }
      }

      # IRC (TLS)
      0.0.0.0:6697 {
         route {
            proxy <internal_ip>:6697
         }
      }
   }
}

@prologic@twtxt.net why don’t you terminate TLS here? It seems as easy as adding tls under route.

@bender@twtxt.net I think I could, but I haven’t bothered to do so yet… I’ll try that out later…

@prologic@twtxt.net I forgot to ask you about this. Did you ended up using TLS with Caddy, or you used something else?

@bender@twtxt.net It’s still a straight-through to the Eris backend that itself uses a Let’s Encrypt cert now. Haven’t tried to also terminate TLS at the Edge yet.

Honestly for these types of services, there probably isn’t much point, as the layer4 module in Caddy doesn’t do inspection/filtering anyway I think? 🤔