#TODO: find out how to make the domain a variable

{
	metrics {
		per_host
	}
}

# Hosted locally
vpn.veltko.de {
    reverse_proxy * http://headscale:8080
}

copyparty.veltko.de {
    reverse_proxy * http://copyparty:3923
}

grafana.veltko.de {
    reverse_proxy * http://grafana:3000
}

# Hosted on the home network, tunneled through tailscale
jellyfin.veltko.de {
    reverse_proxy http://192.168.0.109:30013
}

fotos.veltko.de {
    reverse_proxy http://192.168.0.109:30041
}

git.veltko.de {
    reverse_proxy http://192.168.0.109:30008
}

vaultwarden.veltko.de {
    tls {
	client_auth {
		mode require_and_verify
		trust_pool file /data/custom_certs/ca.crt
	}
    }

    reverse_proxy https://192.168.0.109:30032 {
	transport http {
	    #FIXME: this should really be replaced by a proper cert :(
	    tls_insecure_skip_verify
	}
    }
}