final

Caddyfile

@@ -1,8 +1,7 @@
 {
 	email {$ACME_EMAIL}
 }
-
-git.tvheggland.no {
+git.{$DOMENESHOP_DNS} {
 	rate_limit {
 		zone git_zone {
 			key {remote_host}
@@ -10,6 +9,27 @@ git.tvheggland.no {
 			window 10s
 		}
 	}
-
 	reverse_proxy gitea:3000
 }
+lms.home.{$DOMENESHOP_DNS}  {
+    tls internal
+    @internal remote_ip 10.10.10.0/24 127.0.0.1/8
+    handle @internal {
+        basicauth {
+            tvh $2a$14$9nNDlR6oYiSIX7ENnel.E.pezV8LQpHS3hhzhglXwijMFwgEYMAq2
+        }
+        reverse_proxy lms:9000        
+    }
+    respond "Forbidden" 403
+}
+
+pihole.home.{$DOMENESHOP_DNS} {
+    tls internal
+    redir / /admin
+    reverse_proxy pihole:80
+    respond "Forbidden" 403
+}
+nextcloud.{$DOMENESHOP_DNS}  {
+        encode gzip zstd
+        reverse_proxy nextcloud-app:80
+}

docker-compose.yaml

@@ -13,14 +13,15 @@ services:
       - caddy_data:/data
       - caddy_config:/config
     networks:
-      - caddy_net
+      - proxy_net
+      - edge_net
 
 networks:
-  caddy_net:
+  proxy_net:
+    external: true
+  edge_net:
     external: true
 
 volumes:
   caddy_data:
-    name: docker_caddy_data
   caddy_config:
-    name: docker_caddy_config