lots of caddy things
change
commit 60d1647f6759a06154c0b8deca711a976250b021
author Alpha Chen <alpha@kejadlen.dev>
date
parent 6ca309f0
diff --git a/lotus-land-story/templates/Caddyfile b/lotus-land-story/templates/Caddyfile
index 9f6eae4..dda8486 100644
--- a/lotus-land-story/templates/Caddyfile
+++ b/lotus-land-story/templates/Caddyfile
@@ -9,36 +9,53 @@
 	}
 }
 
+### Auth
+
 # https://www.authelia.com/integration/proxies/caddy/#forwarded-header-trust#trusted-proxies
 (trusted_proxy_list) {
 	trusted_proxies {{ trusted_proxies }}
 }
 
+{% for domain in ("kejadlen.dev", "chislan.family") %}
+auth.{{ domain }} {
+	reverse_proxy authelia:9091 {
+		import trusted_proxy_list
+	}
+}
+{% endfor %}
+
+http://setup {
+	bind tailscale/setup
+	tailscale_auth
+	file_server {
+		root /data/setup
+	}
+}
+
+### Monitoring
+
+# TODO Update this, since it's deprecated
 :2019 {
 	metrics
 }
 
+cadvisor {
+	tls internal
+	bind tailscale/cadvisor
+	reverse_proxy cadvisor:8080
+}
+
 loki.kejadlen.dev {
 	reverse_proxy loki:3100
 }
 
-rss {
+prometheus {
 	tls internal
-	bind tailscale/rss
+	bind tailscale/prometheus
 	tailscale_auth
-	reverse_proxy miniflux:8080 {
-		header_up Remote-User {http.auth.user.tailscale_login}
-	}
-}
-
-prometheus.kejadlen.dev {
 	reverse_proxy prometheus:9090
 }
 
-grafana.kejadlen.dev {
-	reverse_proxy grafana:3000
-}
-
 grafana {
 	tls internal
 	bind tailscale/grafana
@@ -48,18 +65,30 @@ grafana {
 	}
 }
 
-{% for domain in ("kejadlen.dev", "chislan.family") %}
-auth.{{ domain }} {
-	reverse_proxy authelia:9091 {
-		import trusted_proxy_list
+### Services
+
+rss {
+	tls internal
+	bind tailscale/rss
+	tailscale_auth
+	reverse_proxy miniflux:8080 {
+		header_up Remote-User {http.auth.user.tailscale_login}
 	}
 }
-{% endfor %}
+
+search {
+	tls internal
+	bind tailscale/search
+	tailscale_auth
+	reverse_proxy searxng:8080
+}
 
 search.kejadlen.dev {
 	reverse_proxy searxng:8080
 }
 
+### Family
+
 books {
 	tls internal
 	bind tailscale/books
@@ -88,44 +117,28 @@ docs.chislan.family {
 	}
 }
 
-hey.kejadlen.dev
-	reverse_proxy gotosocial:8080
-
-	handle /metrics {
-		respond 404
-	}
-}
-
-cadvisor {
+docs {
 	tls internal
-	bind tailscale/cadvisor
-	reverse_proxy cadvisor:8080
-}
-
-http://setup {
-	bind tailscale/setup
+	bind tailscale/docs
 	tailscale_auth
-	file_server {
-		root /data/setup
+	reverse_proxy paperless-ngx:8000 {
+		header_up Remote-User {http.auth.user.tailscale_user}
 	}
-}
 
-caddytest {
-	log
-	tls internal
-	bind tailscale/caddytest
-	tailscale_auth
-	reverse_proxy localhost:3333 {
-		header_up Remote-User {http.auth.user.tailscale_login}
-		header_up X-Webauth-User {http.auth.user.tailscale_login}
-		header_up X-Tailscale-Tailnet {http.auth.user.tailscale_tailnet}
+	redir /flower /flower/
+	handle /flower/* {
+		reverse_proxy paperless-ngx:5555
 	}
 }
 
-:3333 {
-	log
-	templates
-	respond `Hello, {{ '{{' }}.Req.Header.Get "Remote-User"}} from {{ '{{' }}.Req.Header.Get "X-Tailscale-Tailnet"}}`
+### External
+
+hey.kejadlen.dev
+	reverse_proxy gotosocial:8080
+
+	handle /metrics {
+		respond 404
+	}
 }
 
 # vim: ts=4