From c3a377a265d2ca92b8823be281fa0e487d30692b Mon Sep 17 00:00:00 2001
From: Your Name <you@example.com>
Date: Wed, 18 Feb 2026 15:12:32 +0800
Subject: switch to rocky linux 10, add --init for zombie reaping, fix NAT
 setup

- base image alpine -> rockylinux:10 (cgit/fcgiwrap from EPEL)
- drop spawn-fcgi, use fcgiwrap -s directly
- add --init to reap zombie sshd-auth processes (PID exhaustion fix)
- replace ip addr/route networking with nft DNAT/SNAT/FORWARD rules
- add FORWARD accept rule that was missing for inbound DNAT traffic
---
 Caddyfile | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

(limited to 'Caddyfile')

diff --git a/Caddyfile b/Caddyfile
index b783e7b..7458b93 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -1,18 +1,18 @@
 {$DOMAIN} {
     handle {$CGIT_CSS} {
-        root * /usr/share/webapps/cgit
+        root * /usr/share/cgit
         file_server
     }
 
     handle {$CGIT_LOGO} {
-        root * /usr/share/webapps/cgit
+        root * /usr/share/cgit
         file_server
     }
 
     handle {
         reverse_proxy unix/{$FCGI_SOCK} {
             transport fastcgi {
-                env SCRIPT_FILENAME /usr/share/webapps/cgit/cgit.cgi
+                env SCRIPT_FILENAME /var/www/cgi-bin/cgit
                 env QUERY_STRING {query}
                 env HTTP_HOST {host}
                 env PATH_INFO {path}
-- 
cgit