请问自建的 DoH 服务器在 Caddy 里怎么配置

[jaesony]

原来在Nginx中这样配置：

		location /doh {
			proxy_pass       https://127.0.0.1:8443/dns-query;
			proxy_set_header Host      $host;
			proxy_set_header X-Real-IP $remote_addr;
		}

Caddy参考的Xray(M+B+D+G+A)+Caddy(N+T)，DoH转发一直通不过

        "http2": {
          "listen": ["unix/@http2.sock"],
          "listener_wrappers": [{
            "wrapper": "proxy_protocol"
          },
          {
            "wrapper": "tls"
          }],
          "routes": [{
            "match": [{
              "path": ["/doh"]
            }],
            "handle": [{
              "handler": "reverse_proxy",
              "upstreams": [{
                "dial": "127.0.0.1:8443"
              }]
            }]
          },

请教下哪里有问题

[lxhao61]

采用如下配置试试。

........
        "http2": {
          "listen": ["unix/@http2.sock"],
          "listener_wrappers": [{
            "wrapper": "proxy_protocol"
          },
          {
            "wrapper": "tls"
          }],
          "routes": [{
            "match": [{
              "path": ["/doh/*"]
            }],
            "handle": [{
              "handler": "reverse_proxy",
              "transport": {
                "protocol": "http",
                "tls": {}
              },
              "upstreams": [{
              	"dial": "127.0.0.1:8443"
              }],
              "rewrite": {
              	"uri": "/dns-query"
              },
              "headers": {
              	"request": {
                  "set": {
                    "Host": ["{http.reverse_proxy.upstream.hostport}"],
                    "X-Real-IP": ["{http.vars.client_ip}"]
                  }
              	}
              }
            }]
          },
........

[jaesony]

tls里还需要添加insecure_skip_verify，谢谢大佬！！！