From 754bc2876f0fb41b1acc220d99d91cd41e51b684 Mon Sep 17 00:00:00 2001
From: asepharyana <asepharyana@users.noreply.github.com>
Date: Tue, 1 Sep 2026 20:19:00 +0700
Subject: [PATCH] =?UTF-8?q?fix(caddy):=20serve=20gmw.asepharyana.my.id=20?=
 =?UTF-8?q?=E2=86=92=20:4009=20(was=20525)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

GMW dashboard SSL was broken (Cloudflare 525) because gmw was not in
the Caddyfile — no Let's Encrypt cert / TLS origin for the hostname.
Add gmw.asepharyana.my.id block proxying to gmw-proxy nginx (4009),
same as imphnen. Public dashboard now reachable (200, valid cert).
---
 infra/caddy/Caddyfile.prod | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/infra/caddy/Caddyfile.prod b/infra/caddy/Caddyfile.prod
index fd4f9cb..c515e0b 100644
--- a/infra/caddy/Caddyfile.prod
+++ b/infra/caddy/Caddyfile.prod
@@ -51,6 +51,10 @@ imphnen.asepharyana.my.id {
 	import proxy 4009
 }
 
+gmw.asepharyana.my.id {
+	import proxy 4009
+}
+
 scraper.asepharyana.my.id, api.asepharyana.my.id, scraper.asepharyana.web.id, api.asepharyana.web.id {
 	import proxy 4091
 }