{
    admin off
    email admin@catmedved.com
    auto_https disable_redirects

    servers {
        trusted_proxies static 10.8.0.1
    }
}

(tls_catmedved) {
    tls /etc/caddy/certs/catmedved.com.crt /etc/caddy/certs/catmedved.com.key
}

(tls_kladovka52) {
    tls /etc/caddy/certs/kladovka52.com.crt /etc/caddy/certs/kladovka52.com.key
}

(tls_ulakar) {
    tls /etc/caddy/certs/ulakar.com.crt /etc/caddy/certs/ulakar.com.key
}

(apps) {

# A
    @auth host              auth.catmedved.com
    handle @auth {
        reverse_proxy http://authentik_server:9000
    }
# B
    @backrest host          backrest.catmedved.com
    handle @backrest {
        reverse_proxy http://host.docker.internal:9898
    }

    @beszel host            beszel.catmedved.com
    handle @beszel {
        reverse_proxy http://beszel:8090
    }
# C
#    @copypaste host        copypaste.catmedved.com
#    handle @copypaste {
#        reverse_proxy http://microbin:8080
#    }

    @copypaste host         copypaste.kladovka52.com
    handle @copypaste {
        reverse_proxy http://microbin:8080
    }
# D
    @databasus host         databasus.catmedved.com
    handle @databasus {
        reverse_proxy http://databasus:4005
    }
# F
    @filebrowser host       filebrowser.catmedved.com
    handle @filebrowser {
        reverse_proxy http://filebrowser:80
    }

    @films host             films.catmedved.com
    handle @films {
        reverse_proxy http://jellyfin:8096
    }
# G
    @gameyfin host          gameyfin.catmedved.com
    handle @gameyfin {
        reverse_proxy http://gameyfin:8080
    }

    @gitea host             gitea.catmedved.com
    handle @gitea {
        reverse_proxy http://gitea:3000
    }

    @glancesminipc host             glances-minipc.catmedved.com
    handle @glancesminipc {
        reverse_proxy http://gitea:61208
    }
# H
    @homepage host          home.catmedved.com
    handle @homepage {
        reverse_proxy http://homepage:3000
    }
# M
    @music host             music.catmedved.com
    handle @music {
        reverse_proxy http://navidrome:4533
    }
# P
    @passwords host          passwords.catmedved.com
    handle @passwords {
        reverse_proxy http://vaultwarden:80
    }

    @pdftools host          pdf-tools.catmedved.com
    handle @pdftools {
        reverse_proxy http://stirling_pdf:8080
    }

    @pdftools_k host        pdf-tools.kladovka52.com
    handle @pdftools_k {
        reverse_proxy http://stirling_pdf:8080
    }

    @pihole host            pihole.catmedved.com
    handle @pihole {
        reverse_proxy http://pihole:80
    }

    @photo host             photo.catmedved.com
    handle @photo {
        reverse_proxy immich_server:2283
    }
# R
    @recepies host          recepies.catmedved.com
    handle @recepies {
        reverse_proxy http://mealie:9000
    }
# S
    @syncminipc host        sync-minipc.catmedved.com
    handle @syncminipc {
        reverse_proxy http://host.docker.internal:8384 {
            header_up Host {upstream_hostport}
        }
    }

}

http://*.kladovka52.com {
    @not_from_wg not remote_ip 10.8.0.0/24

    redir @not_from_wg https://{host}{uri} permanent

    import apps
}

http://*.catmedved.com {
    @not_from_wg not remote_ip 10.8.0.0/24

    redir @not_from_wg https://{host}{uri} permanent

    import apps
}

https://*.catmedved.com {
    import tls_catmedved
    import apps
}

https://*.kladovka52.com {
    import tls_kladovka52
    import apps
}

https://*.ulakar.com {
    import tls_ulakar
    import apps
}