Hello, World!

00-caddy/config/Caddyfile

@@ -0,0 +1,49 @@
+#TODO: find out how to make the domain a variable
+{
+	metrics {
+		per_host
+	}
+}
+
+# Hosted locally
+vpn.veltko.de {
+    reverse_proxy * http://headscale:8080
+}
+
+copyparty.veltko.de {
+    reverse_proxy * http://copyparty:3923
+}
+
+grafana.veltko.de {
+    reverse_proxy * http://grafana:3000
+}
+
+# Hosted on the home network, tunneled through tailscale
+jellyfin.veltko.de {
+    reverse_proxy http://192.168.0.109:30013
+}
+
+fotos.veltko.de {
+    reverse_proxy http://192.168.0.109:30041
+}
+
+git.veltko.de {
+    reverse_proxy http://192.168.0.109:30008
+}
+
+vaultwarden.veltko.de {
+    tls {
+	client_auth {
+		mode require_and_verify
+		trust_pool file /data/custom_certs/ca.crt
+	}
+    }
+
+    reverse_proxy https://192.168.0.109:30032 {
+	transport http {
+	    #FIXME: this should really be replaced by a proper cert :(
+	    tls_insecure_skip_verify
+	}
+    }
+}
+}

00-caddy/docker-compose.yaml

@@ -0,0 +1,25 @@
+services:
+  caddy:
+    image: caddy:latest
+    container_name: caddy
+    restart: always
+    networks:
+      nw-caddy:
+    stdin_open: true
+    tty: true
+    volumes:
+      - ./data:/data
+      - ./config:/config
+      - /etc/localtime:/etc/localtime:ro
+    ports:
+      - 80:80
+      - 443:443
+    environment:
+      - CADDY_ADMIN=0.0.0.0:2019
+    entrypoint: /usr/bin/caddy run --adapter caddyfile --config /config/Caddyfile
+    healthcheck:
+      test: ["CMD", "wget", "--quiet", "--tries=1", "--spider", "http://127.0.0.1:2019/config/"]
+      interval: 1m
+      timeout: 10s
+      retries: 3
+      start_period: 5s