{
    admin off
    email admin@catmedved.com
    auto_https disable_redirects

    servers {
        trusted_proxies static 10.8.0.1
    }
}

(apps) {

    @backrest host backrest.catmedved.com
    handle @backrest {
        reverse_proxy http://backrest:9898
    }

    
    @beszel host beszel.catmedved.com
    handle @beszel {
        reverse_proxy http://beszel:8090
    }

#    @copypaste host copypaste.catmedved.com
#    handle @copypaste {
#        reverse_proxy http://microbin:8080
#    }

    @copypaste host copypaste.kladovka52.com
    handle @copypaste {
        reverse_proxy http://microbin:8080
    }

    @gameyfin host gameyfin.catmedved.com
    handle @gameyfin {
        reverse_proxy http://gameyfin:8080
    }

    @gitea host gitea.catmedved.com
    handle @gitea {
        reverse_proxy http://gitea:3000
    }

    @music host music.catmedved.com
    handle @music {
        reverse_proxy http://navidrome:4533
    }

    @pdftools host pdf-tools.catmedved.com
    handle @pdftools {
        reverse_proxy http://stirling_pdf:8080
    }

    @pdftools_k host pdf-tools.kladovka52.com
    handle @pdftools_k {
        reverse_proxy http://stirling_pdf:8080
    }

    @photo host photo.catmedved.com
    handle @photo {
        reverse_proxy immich_server:2283
    }

    @recepies host recepies.catmedved.com
    handle @recepies {
        reverse_proxy http://mealie:9000
    }
}

http://*.kladovka52.com {
    @not_from_wg not remote_ip 10.8.0.0/24

    redir @not_from_wg https://{host}{uri} permanent

    import apps
}

http://*.catmedved.com {
    @not_from_wg not remote_ip 10.8.0.0/24

    redir @not_from_wg https://{host}{uri} permanent

    import apps
}

https://*.catmedved.com {
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem

    import apps
}


auth.catmedved.com {
    reverse_proxy http://authentik_server:9000
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}

# D
databasus.catmedved.com {
    reverse_proxy http://databasus:4005
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}

drone.catmedved.com {
    reverse_proxy http://drone:80
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}

# F
filebrowser.catmedved.com {
    reverse_proxy http://filebrowser:80
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}

films.catmedved.com {
    reverse_proxy http://jellyfin:8096
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}

glances-minipc.catmedved.com {
    reverse_proxy http://glances:61208
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}

# H
home.catmedved.com {
    reverse_proxy http://homepage:3000
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}

# P
passwords.catmedved.com {
    reverse_proxy http://vaultwarden:80
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}

pihole.catmedved.com {
    reverse_proxy http://pihole:80
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}

# S
sync-minipc.catmedved.com {
    reverse_proxy http://host.docker.internal:8384 {
        header_up Host {upstream_hostport}
    }
    tls /etc/caddy/certs/fullchain.pem /etc/caddy/certs/privkey.pem
}