{
	servers {
		metrics
	}
}

# https://www.authelia.com/integration/proxies/caddy/#forwarded-header-trust#trusted-proxies
(trusted_proxy_list) {
       trusted_proxies {{ trusted_proxies }}
}

:2019 {
	metrics
}

loki.{{ domain }} {
	reverse_proxy loki:3100
}

rss.{{ domain }} {
	reverse_proxy miniflux:8080
}

prometheus.{{ domain }} {
	reverse_proxy prometheus:9090
}

grafana.{{ domain }} {
	reverse_proxy grafana:3000
}

auth.{{ domain }} {
	reverse_proxy authelia:9091 {
		import trusted_proxy_list
	}
}

search.{{ domain }} {
 	forward_auth authelia:9091 {
 		uri /api/verify?rd=https://auth.{{ domain }}

 		# This import needs to be included if you're relying on a trusted proxies configuration.
 		import trusted_proxy_list
 	}

 	reverse_proxy searxng:8080 {
 		import trusted_proxy_list
 	}
}

# {{ hledger.subdomain }}.{{ domain }} {
# 	forward_auth authelia:9091 {
# 		uri /api/verify?rd=https://auth.{{ domain }}
# 		# copy_headers Remote-User Remote-Groups Remote-Name Remote-Email

# 		## This import needs to be included if you're relying on a trusted proxies configuration.
# 		import trusted_proxy_list
# 	}

# 	reverse_proxy hledger:5000 {
# 		import trusted_proxy_list
# 	}
# }

books.{{ domain }} {
	forward_auth authelia:9091 {
		uri /api/verify?rd=https://auth.{{ domain }}
		copy_headers Remote-User

		## This import needs to be included if you're relying on a trusted proxies configuration.
		import trusted_proxy_list
	}

	reverse_proxy calibre-web:8083 {
		import trusted_proxy_list
	}
}

paperless.{{ domain }} {
	forward_auth authelia:9091 {
		uri /api/verify?rd=https://auth.{{ domain }}
		copy_headers Remote-User

		# This import needs to be included if you're relying on a trusted proxies configuration.
		import trusted_proxy_list
	}

	reverse_proxy paperless-ngx:8000 {
		import trusted_proxy_list
	}

	redir /flower /flower/
	handle /flower/* {
		reverse_proxy paperless-ngx:5555
	}
}

# vim: ts=4