# https://www.authelia.com/integration/proxies/caddy/#forwarded-header-trust#trusted-proxies
(trusted_proxy_list) {
       trusted_proxies {{ trusted_proxies }}
}

:2019 {
	metrics
}

loki.{{ domain }} {
	reverse_proxy loki:3100
}

rss.{{ domain }} {
	reverse_proxy miniflux:8080
}

prometheus.{{ domain }} {
	reverse_proxy prometheus:9090
}

grafana.{{ domain }} {
	reverse_proxy grafana:3000
}

auth.{{ domain }} {
	reverse_proxy authelia:9091 {
		import trusted_proxy_list
	}
}

{{ hledger.subdomain }}.{{ domain }} {
	forward_auth authelia:9091 {
		uri /api/verify?rd=https://auth.{{ domain }}
		# copy_headers Remote-User Remote-Groups Remote-Name Remote-Email

		## This import needs to be included if you're relying on a trusted proxies configuration.
		import trusted_proxy_list
	}

	reverse_proxy hledger:5000 {
		import trusted_proxy_list
	}
}

books.{{ domain }} {
	forward_auth authelia:9091 {
		uri /api/verify?rd=https://auth.{{ domain }}
		copy_headers Remote-User
		# copy_headers Remote-User Remote-Groups Remote-Name Remote-Email

		## This import needs to be included if you're relying on a trusted proxies configuration.
		import trusted_proxy_list
	}

	reverse_proxy calibre-web:8083 {
		import trusted_proxy_list
	}
}