From 5fe333210e539698717b831a911126c07014599f Mon Sep 17 00:00:00 2001
From: James Wampler <james@wamp.dev>
Date: Thu, 20 Aug 2026 16:57:32 -0700
Subject: [PATCH] feat(caddy): add novelly.com routes, pin acme_ca to LE prod

Force prod ACME endpoint explicitly; renewal was silently hitting
staging, which blocked *.wampler.us cert renewal.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01DPXhxhLUopnuDm3dWeHd5C
---
 caddy/compose.yml    |  4 ++++
 caddy/conf/Caddyfile | 13 +++++++++++++
 2 files changed, 17 insertions(+)

diff --git a/caddy/compose.yml b/caddy/compose.yml
index b4c823d..f4f72a5 100644
--- a/caddy/compose.yml
+++ b/caddy/compose.yml
@@ -35,6 +35,7 @@ services:
     networks:
       - proxy
       - miccheck-qa-net
+      - novelly-net
 
 networks:
   proxy:
@@ -43,3 +44,6 @@ networks:
   miccheck-qa-net:
     name: miccheck-qa-net
     external: true
+  novelly-net:
+    name: novelly-net
+    external: true
diff --git a/caddy/conf/Caddyfile b/caddy/conf/Caddyfile
index aded145..8126b93 100755
--- a/caddy/conf/Caddyfile
+++ b/caddy/conf/Caddyfile
@@ -1,5 +1,6 @@
 {
   email james@wampler.us
+  acme_ca https://acme-v02.api.letsencrypt.org/directory
 }
 
 *.wampler.us {
@@ -96,3 +97,15 @@ api.miccheck-qa.com {
     encode gzip
     reverse_proxy api:8080
 }
+
+web.novelly.com {
+    tls internal
+    encode gzip
+    reverse_proxy novelly-web:80
+}
+
+api.novelly.com {
+    tls internal
+    encode gzip
+    reverse_proxy novelly-api:8080
+}