fix jellyfin, dynamic dns and experiment with header-based proxy

caddy/Caddyfile

@@ -1,10 +1,10 @@
 {
 	dynamic_dns {
 		provider route53
-        domains {
-            veenboer.xyz rik
-        }
-        check_interval 1m
+		domains {
+			veenboer.xyz. rik
+		}
+		versions ipv4
 	}
 }
 
@@ -12,14 +12,20 @@ rik.veenboer.xyz \
 *.rik.veenboer.xyz \
  {
 	reverse_proxy nginx
+	handle_path /test/* {
+		reverse_proxy host:12345
+	}
+	handle_path /jellyfin/* {
+		reverse_proxy host:8097
+	}
 	tls {
 		dns route53 {
 			access_key_id {$AWS_ACCESS_KEY_ID}
 			secret_access_key {$AWS_SECRET_ACCESS_KEY}
 		}
 	}
-	route {
-		reverse_proxy /test/* host:8097
+	log {
+		output file /var/log/root.log
 	}
 }
 
@@ -31,12 +37,13 @@ rik.veenboer.xyz \
 	}
 }
 
+#import unprotected ha host:8123 # homeassistant
+import unprotected jellyfin host:8097
 import unprotected authentik host:19000
 import unprotected jupyter host:9999
 import unprotected grafana host:3333
 import unprotected pgadmin host:5050
 import unprotected homarr host:17575
-import unprotected jellyfin host:8097
 import unprotected jellyseerr host:15055
 
 (authentik) {
@@ -78,7 +85,6 @@ import unprotected jellyseerr host:15055
 	}
 }
 
-import protected ha host:8123 # homeassistant
 import protected sonarr host:18989
 import protected app host:12345
 import protected dagster host:3000
@@ -100,11 +106,36 @@ unused.rik.veenboer.xyz {
 	}
 
 	handle /seafhttp* {
-			uri strip_prefix seafhttp
-			reverse_proxy host:8182
-		}
+		uri strip_prefix seafhttp
+		reverse_proxy host:8182
+	}
 
-		handle /seafdav* {
-			reverse_proxy host:8180
+	handle /seafdav* {
+		reverse_proxy host:8180
+	}
+}
+
+ha.rik.veenboer.xyz {
+	log {
+		output file /var/log/ha.log
+	}
+
+	route {
+		@app {
+			header X-Requested-With io.homeassistant.companion.android
+		}
+		handle @app {
+			reverse_proxy host:8123
+		}
+		handle {
+			reverse_proxy /outpost.goauthentik.io/* http://host:19000
+			forward_auth http://host:19000 {
+				uri /outpost.goauthentik.io/auth/caddy?rd={http.request.uri}
+				copy_headers {
+					X-Homeassistant-User
+				}
+			}
+			reverse_proxy host:8123
 		}
 	}
+}