{
  admin off

  http_port 80
  https_port 443
}

# TODO does not work
# caddy ignores it!!!!!!!!!
(common) {
  header * Server "nginx/1.12.2-2"
}

(proxy-headers) {
  header_up X-Real-IP {remote_host}
  header_down * Server "nginx/1.12.2-2"
}

#gzip
#tls support@aggtaa.ru
#errors /var/log/caddy/error.log

auth.aggtaa.com {
  reverse_proxy auth:9091 {
  }
  log {
    output file /var/log/caddy/auth.aggtaa.com.log
  }
}

pve.aggtaa.com {
  reverse_proxy 10.0.64.21:8006 {
    transport http {
      tls
      tls_insecure_skip_verify
    }
  }
  log {
    output file /var/log/caddy/pve.aggtaa.com.log
  }
}

vw.aggtaa.com {
  reverse_proxy vaultwarden:80
  log {
    output file /var/log/caddy/vw.aggtaa.com.log
  }
}

cluster-c.aggtaa.com {
  forward_auth auth:9091 {
    uri /api/authz/forward-auth
    copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
  }

  reverse_proxy dockge:5001 {
  }
  log {
    output file /var/log/caddy/cluster-c.aggtaa.com.log
  }
}

p.aggtaa.com {
  forward_auth auth:9091 {
    uri /api/authz/forward-auth
    copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
  }

  reverse_proxy 10.0.64.12:8080
  log {
    output file /var/log/caddy/p.aggtaa.com.log
  }
}

apps.aggtaa.com {
  forward_auth auth:9091 {
    uri /api/authz/forward-auth
    copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
  }
  
  reverse_proxy homarr:7575
  log {
    output file /var/log/caddy/apps.aggtaa.com.log
  }
}

c.aggtaa.com {  
  reverse_proxy radicale:5232
  log {
    output file /var/log/caddy/c.aggtaa.com.log
  }
}

zigbee2mqtt.aggtaa.com {  
  reverse_proxy zigbee2mqtt:8080
  log {
    output file /var/log/caddy/zigbee2mqtt.aggtaa.com.log
  }
}

git.aggtaa.com {
  reverse_proxy 10.0.64.33:80
  log {
    output file /var/log/caddy/git.aggtaa.com.log
  }
}

files.aggtaa.com {
  reverse_proxy filebrowser-quantum:80
  log {
    output file /var/log/caddy/files.aggtaa.com.log
  }
}

photo.aggtaa.com {
  reverse_proxy immich_server:2283
  log {
    output file /var/log/caddy/photo.aggtaa.com.log
  }
}

mqtt.aggtaa.com {
  forward_auth auth:9091 {
    uri /api/authz/forward-auth
    copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
  }

  reverse_proxy bunkerm:2000
  log {
    output file /var/log/caddy/mqtt.aggtaa.com.log
  }
}

quest.aggtaa.com {

  reverse_proxy tidyquest:3000
  log {
    output file /var/log/caddy/quest.aggtaa.com.log
  }
}

notes.aggtaa.com {

  reverse_proxy joplin_app:22300
  log {
    output file /var/log/caddy/notes.aggtaa.com.log
  }
}
