关于Caddy sni如何重定向

[ghost]

lxhao61大佬，我想请教一下。我修改了你的代码，当使用http://example.com和http://example.com/index.html访问时，都可以跳转到https://www.example.com和https://www.example.com/index.html。但使用https://example.com和https://example.com/index.html访问时不会跳转。请问我应该如何修改代码才能跳转到https://www.example.com和https://www.example.com/index.html呢？

{
	"admin": {
		"disabled": true
	},
	"logging": {
		"logs": {
			"default": {
				"writer": {
					"output": "file",
					"filename": "/var/log/caddy/error.log"
				},
				"level": "ERROR"
			}
		}
	},
	"storage": {
		"module": "file_system",
		"root": "/usr/local/etc/v2ray/cert"
	},
	"apps": {
		"layer4": {
			"servers": {
				"sni": {
					"listen": [
						":443"
					],
					"routes": [
						{
							"match": [
								{
									"tls": {
										"sni": [
											"trojan.example.com"
										]
									}
								}
							],
							"handle": [
								{
									"handler": "proxy",
									"upstreams": [
										{
											"dial": [
												"127.0.0.1:7443"
											]
										}
									]
								}
							]
						},
						{
							"match": [
								{
									"tls": {
										"sni": [
											"example.com",
											"grpc.example.com",
											"hysteria.example.com",
											"www.example.com"
										]
									}
								}
							],
							"handle": [
								{
									"handler": "proxy",
									"upstreams": [
										{
											"dial": [
												"127.0.0.1:5443"
											]
										}
									],
									"proxy_protocol": "v2"
								}
							]
						}
					]
				}
			}
		},
		"http": {
			"servers": {
				"h1": {
					"listen": [
						":80"
					],
					"routes": [
						{
							"handle": [
								{
									"handler": "static_response",
									"headers": {
										"Location": [
											"https://www.example.com{http.request.uri}"
										]
									},
									"status_code": 301
								}
							]
						}
					]
				},
				"h1h2c": {
					"listen": [
						"127.0.0.1:88"
					],
					"routes": [
						{
							"handle": [
								{
									"handler": "headers",
									"response": {
										"set": {
											"Strict-Transport-Security": [
												"max-age=31536000; includeSubDomains; preload"
											]
										}
									}
								},
								{
									"handler": "file_server",
									"root": "/usr/share/nginx/www"
								}
							]
						}
					],
					"protocols": [
						"h1",
						"h2c"
					]
				},
				"https": {
					"listen": [
						"127.0.0.1:5443"
					],
					"listener_wrappers": [
						{
							"wrapper": "proxy_protocol"
						},
						{
							"wrapper": "tls"
						}
					],
					"routes": [
						{
							"match": [
								{
									"protocol": "grpc",
									"path": [
										"/HST4jPOd/*"
									]
								}
							],
							"handle": [
								{
									"handler": "reverse_proxy",
									"transport": {
										"protocol": "http",
										"versions": [
											"h2c",
											"2"
										]
									},
									"upstreams": [
										{
											"dial": "127.0.0.1:6010"
										}
									],
									"flush_interval": -1,
									"headers": {
										"request": {
											"set": {
												"X-Real-Ip": [
													"{http.request.remote.host}"
												]
											}
										}
									}
								}
							]
						},
						{
							"handle": [
								{
									"handler": "forward_proxy",
									"auth_user_deprecated": "user",
									"auth_pass_deprecated": "*",
									"hide_ip": true,
									"hide_via": true,
									"probe_resistance": {}
								}
							]
						},
						{
							"handle": [
								{
									"handler": "headers",
									"response": {
										"set": {
											"Strict-Transport-Security": [
												"max-age=31536000; includeSubDomains; preload"
											]
										}
									}
								},
								{
									"handler": "file_server",
									"root": "/usr/share/nginx/www"
								}
							]
						}
					],
					"tls_connection_policies": [
						{
							"cipher_suites": [
								"TLS_AES_256_GCM_SHA384",
								"TLS_AES_128_GCM_SHA256",
								"TLS_CHACHA20_POLY1305_SHA256",
								"TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384",
								"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256",
								"TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256"
							],
							"curves": [
								"x25519",
								"secp521r1",
								"secp384r1",
								"secp256r1"
							]
						}
					],
					"protocols": [
						"h1",
						"h2"
					]
				}
			}
		},
		"tls": {
			"certificates": {
				"automate": [
					"example.com",
					"*.example.com"
				]
			},
			"automation": {
				"policies": [
					{
						"issuers": [
							{
								"module": "acme",
								"email": "abcd@gmail.com",
								"challenges": {
									"dns": {
										"provider": {
											"name": "cloudflare",
											"api_token": "*"
										}
									}
								}
							}
						]
					}
				]
			}
		}
	}
}

[lxhao61]

首先 Caddy SNI 没有重定向功能，实现你需要的重定向配置如下：
80 端口部分修改

//........<省略>........
					"routes": [
						{
							"handle": [
								{
									"handler": "static_response",
									"headers": {
										"Location": [
											"https://{http.request.host}{http.request.uri}"
										]
									},
									"status_code": 301
								}
							]
						}
					],
					"protocols": ["h1"]
//........<省略>........

5443 端口部分修改

//........<省略>........
						{
							"match": [
								{
									"host": [
										"example.com"
									]
								}
							],
							"handle": [
								{
									"handler": "static_response",
									"headers": {
										"Location": [
											"https://www.example.com{http.request.uri}"
										]
									},
									"status_code": 301
								}
							]
						},
						{
							"match": [
								{
									"protocol": "grpc",
									"path": [
										"/HST4jPOd/*"
									]
								}
							],
							"handle": [
								{
									"handler": "reverse_proxy",
									"transport": {
										"protocol": "http",
										"versions": [
											"h2c",
											"2"
										]
									},
									"upstreams": [
										{
											"dial": "127.0.0.1:6010"
										}
									],
									"headers": {
										"request": {
											"set": {
												"X-Real-IP": [
													"{http.vars.client_ip}"
												]
											}
										}
									}
								}
							]
						},
//........<省略>........
					"automatic_https": {
						"disable": true
					 },
					"protocols": [
						"h1",
						"h2"
					]
//........<省略>........

另外你现在配置（省略部分）很旧了、且不安全了，建议参考对应示例更新。

[ghost]

感谢你的帮助！现在我可以开始重定向，并且我会认真考虑你提到的安全建议进行参考修改。