import conf/*.caddy

{
	dynamic_dns {
		provider route53
		domains {
			veenboer.xyz. rik
		}
		versions ipv4
	}

	#	layer4 {
	#		:443 {
	#			@openvpn openvpn
	#			route @openvpn {
	#				proxy host:444 # Proxy OpenVPN traffic to its backend
	#			}
	#		}
	#	}

	order geoip2_vars first
	geoip2 {
		#	accountId {$GEO_ACCOUNT_ID}
		#	licenseKey {$GEO_API_KEY}
		databaseDirectory /data/caddy/geoip/
		lockFile /data/caddy/geoip/geoip2.lock
		editionID GeoLite2-City
		updateUrl https://updates.maxmind.com
		updateFrequency 86400 # in seconds
	}

	import auth
}

(unprotected) {
	{args[0]}.rik.veenboer.xyz {
		log {
			output file /var/log/{args[0]}.log
		}
		reverse_proxy {args[1]}
	}
}

import unprotected authentik host:19000
import unprotected vouch host:9090
import unprotected jellyfin host:8097
import unprotected seafile host:8082
import unprotected grafana host:3333
import unprotected pgadmin host:5050
import unprotected homarr host:17575
import unprotected jellyseerr host:15055

(authentik) {
	reverse_proxy /outpost.goauthentik.io/* http://host:19000
	forward_auth http://host:19000 {
		uri /outpost.goauthentik.io/auth/caddy?rd={http.request.uri}
		copy_headers {
			X-Authentik-Username
			X-Authentik-Groups
			X-Authentik-Email
			X-Authentik-Name
			X-Authentik-Uid
			X-Authentik-Jwt
			X-Authentik-Meta-Jwks
			X-Authentik-Meta-Outpost
			X-Authentik-Meta-Provider
			X-Authentik-Meta-App
			X-Authentik-Meta-Version
			X-Authentik-Other
			X-Authentik-Password
			X-Authentik-This
			X-Authentik-What
			Authorization>X-Custom-Authorization
			X-Custom-User
			X-Custom-Password
			X-User-Header
		}
	}
}

(protected) {
	{args[0]}.rik.veenboer.xyz {
		import authentik
		reverse_proxy {args[1]}
	}
}

import protected sonarr host:18989
import protected radarr host:17878
import protected bazarr host:16767
import protected jackett host:9117
import protected dagster host:3000
import protected photoprism host:2342
import protected qbittorrent host:9092
import protected esp host:6052
import protected dsmr host:8888
import protected transmission host:9091
import protected droppy host:8989
import protected filebrowser host:8002
import protected jupyter host:9999

import sites/*.caddy