final

Caddyfile

@@ -1,8 +1,7 @@
 {
 	email {$ACME_EMAIL}
 }
-
-git.tvheggland.no {
+git.{$DOMENESHOP_DNS} {
 	rate_limit {
 		zone git_zone {
 			key {remote_host}
@@ -10,6 +9,27 @@ git.tvheggland.no {
 			window 10s
 		}
 	}
-
 	reverse_proxy gitea:3000
 }
+lms.home.{$DOMENESHOP_DNS}  {
+    tls internal
+    @internal remote_ip 10.10.10.0/24 127.0.0.1/8
+    handle @internal {
+        basicauth {
+            tvh $2a$14$9nNDlR6oYiSIX7ENnel.E.pezV8LQpHS3hhzhglXwijMFwgEYMAq2
+        }
+        reverse_proxy lms:9000        
+    }
+    respond "Forbidden" 403
+}
+
+pihole.home.{$DOMENESHOP_DNS} {
+    tls internal
+    redir / /admin
+    reverse_proxy pihole:80
+    respond "Forbidden" 403
+}
+nextcloud.{$DOMENESHOP_DNS}  {
+        encode gzip zstd
+        reverse_proxy nextcloud-app:80
+}