wrolpi/etc/raspberrypios/Caddyfile.onboarding

# Pre-onboarding Caddyfile: temporary self-signed cert, no media drive.
# Redirects all traffic to the Controller UI for onboarding.
# Replaced by the full Caddyfile after onboarding + repair.

{
	auto_https disable_redirects
}

:443 {
	tls /etc/ssl/wrolpi/cert.crt /etc/ssl/wrolpi/cert.key
	redir * http://{host}/ 302
}