diff --git a/Caddyfile b/Caddyfile index 1896cc4..6f44c54 100644 --- a/Caddyfile +++ b/Caddyfile @@ -1,8 +1,7 @@ { email {$ACME_EMAIL} } - -git.tvheggland.no { +git.{$DOMENESHOP_DNS} { rate_limit { zone git_zone { key {remote_host} @@ -10,6 +9,27 @@ git.tvheggland.no { window 10s } } - reverse_proxy gitea:3000 } +lms.home.{$DOMENESHOP_DNS} { + tls internal + @internal remote_ip 10.10.10.0/24 127.0.0.1/8 + handle @internal { + basicauth { + tvh $2a$14$9nNDlR6oYiSIX7ENnel.E.pezV8LQpHS3hhzhglXwijMFwgEYMAq2 + } + reverse_proxy lms:9000 + } + respond "Forbidden" 403 +} + +pihole.home.{$DOMENESHOP_DNS} { + tls internal + redir / /admin + reverse_proxy pihole:80 + respond "Forbidden" 403 +} +nextcloud.{$DOMENESHOP_DNS} { + encode gzip zstd + reverse_proxy nextcloud-app:80 +} diff --git a/docker-compose.yaml b/docker-compose.yaml index 4bff411..b21e11b 100644 --- a/docker-compose.yaml +++ b/docker-compose.yaml @@ -13,14 +13,15 @@ services: - caddy_data:/data - caddy_config:/config networks: - - caddy_net + - proxy_net + - edge_net networks: - caddy_net: + proxy_net: + external: true + edge_net: external: true volumes: caddy_data: - name: docker_caddy_data caddy_config: - name: docker_caddy_config