From 96932d63a9e2f231b611ea9fbbf2c9f353853b1e Mon Sep 17 00:00:00 2001
From: "v.karaychentsev" <105486287+vk-aterise@users.noreply.github.com>
Date: Sun, 8 Feb 2026 19:14:07 +0300
Subject: [PATCH] Caddy: initial setup

---
 docker/caddy/Caddyfile          | 148 ++++++++++++++++++++++++++++++++
 docker/caddy/docker-compose.yml |  25 ++++++
 2 files changed, 173 insertions(+)
 create mode 100644 docker/caddy/Caddyfile
 create mode 100644 docker/caddy/docker-compose.yml

diff --git a/docker/caddy/Caddyfile b/docker/caddy/Caddyfile
new file mode 100644
index 0000000..4f755eb
--- /dev/null
+++ b/docker/caddy/Caddyfile
@@ -0,0 +1,148 @@
+{
+    admin :2019
+    # email me@example.com
+}
+
+# A
+ai.catmedved.com {
+    reverse_proxy http://librechat:3080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+auth.catmedved.com {
+    reverse_proxy http://authentik_server:9000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# B
+beszel.catmedved.com {
+    reverse_proxy http://beszel:8090
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# C
+caddy-minipc.catmedved.com {
+    reverse_proxy http://caddyui:8000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# D
+
+databasus.catmedved.com {
+    reverse_proxy http://databasus:4005
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+drone.catmedved.com {
+    reverse_proxy http://drone:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# F
+files-minipc.catmedved.com {
+    reverse_proxy /outpost.goauthentik.io* https://auth.catmedved.com {
+        header_up Host {host}
+    }
+    reverse_proxy http://filebrowser:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+films.catmedved.com {
+    reverse_proxy http://jellyfin:8096
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# G
+gameyfin.catmedved.com {
+    reverse_proxy http://gameyfin:8080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+gitea.catmedved.com {
+    reverse_proxy http://gitea.catmedved.com:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+glances-minipc.catmedved.com {
+    reverse_proxy http://glances:61208
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# H
+home.catmedved.com {
+    reverse_proxy http://homepage:3000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# M
+myspeed-minipc.catmedved.com {
+    reverse_proxy http://myspeed:5216
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+music.catmedved.com {
+    reverse_proxy http://navidrome:4533
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# N
+nocodb.catmedved.com {
+    reverse_proxy http://nocodb:8080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# P
+passwords.catmedved.com {
+    reverse_proxy http://vaultwarden:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+pihole.catmedved.com {
+    reverse_proxy http://pihole:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+photo.catmedved.com {
+    reverse_proxy http://immich_server:2283
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# S
+speedtest-minipc.catmedved.com {
+    reverse_proxy http://speedtest-tracker:80
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+sync-minipc.catmedved.com {
+    reverse_proxy http://172.24.0.1:8384 {
+        header_up Host {upstream_hostport}
+    }
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# T
+transmission.catmedved.com {
+    reverse_proxy transmission:9091
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+# W
+weatherapp.catmedved.com {
+    reverse_proxy http://weatherapp:8080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+wekan.catmedved.com {
+    reverse_proxy http://wekan:8080
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+wikijs.catmedved.com {
+    reverse_proxy http://wikijs:3000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
+
+whatsupdocker-minipc.catmedved.com {
+    reverse_proxy http://whatsupdocker:3000
+    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
+}
diff --git a/docker/caddy/docker-compose.yml b/docker/caddy/docker-compose.yml
new file mode 100644
index 0000000..a012d5a
--- /dev/null
+++ b/docker/caddy/docker-compose.yml
@@ -0,0 +1,25 @@
+services:
+  caddy:
+    image: caddy:latest
+    container_name: caddy
+    restart: unless-stopped
+    networks:
+      - caddy_internal
+    ports:
+      - "80:80"
+      - "443:443"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile
+      - /home/vk/certs/catmedved.com:/etc/caddy/certs:ro
+      - caddy_data:/data
+      - caddy_config:/config
+    environment:
+      - TZ=Europe/Minsk
+
+networks:
+  caddy_internal:
+    external: true
+
+volumes:
+  caddy_data:
+  caddy_config: