{
	servers {
		metrics
	}
}

# https://www.authelia.com/integration/proxies/caddy/#forwarded-header-trust#trusted-proxies
(trusted_proxy_list) {
	trusted_proxies {{ trusted_proxies }}
}

:2019 {
	metrics
}

loki.{{ domain }} {
	reverse_proxy loki:3100
}

rss.{{ domain }} {
	reverse_proxy miniflux:8080
}

prometheus.{{ domain }} {
	reverse_proxy prometheus:9090
}

grafana.{{ domain }} {
	reverse_proxy grafana:3000
}

{% for domain in ("kejadlen.dev", "chislan.family") %}
auth.{{ domain }} {
	reverse_proxy authelia:9091 {
		import trusted_proxy_list
	}
}
{% endfor %}

search.{{ domain }} {
	log

	handle /opensearch.xml {
		reverse_proxy searxng:8080
	}

	handle /static/* {
		reverse_proxy searxng:8080
	}

	handle /autocompleter {
		reverse_proxy searxng:8080
	}

	handle {
		forward_auth authelia:9091 {
			uri /api/verify?rd=https://auth.{{ domain }}
			# copy_headers Remote-User

			# This import needs to be included if you're relying on a trusted proxies configuration.
			import trusted_proxy_list
		}

		reverse_proxy searxng:8080 {
			import trusted_proxy_list
		}
	}
}

# {{ hledger.subdomain }}.{{ domain }} {
# 	forward_auth authelia:9091 {
# 		uri /api/verify?rd=https://auth.{{ domain }}
# 		# copy_headers Remote-User Remote-Groups Remote-Name Remote-Email

# 		## This import needs to be included if you're relying on a trusted proxies configuration.
# 		import trusted_proxy_list
# 	}

# 	reverse_proxy hledger:5000 {
# 		import trusted_proxy_list
# 	}
# }

books.{{ domain }} {
	forward_auth authelia:9091 {
		uri /api/verify?rd=https://auth.{{ domain }}
		copy_headers Remote-User

		## This import needs to be included if you're relying on a trusted proxies configuration.
		import trusted_proxy_list
	}

	reverse_proxy calibre-web:8083 {
		import trusted_proxy_list
	}
}

docs.chislan.family {
	forward_auth authelia:9091 {
		uri /api/verify?rd=https://auth.chislan.family
		copy_headers Remote-User

		# This import needs to be included if you're relying on a trusted proxies configuration.
		import trusted_proxy_list
	}

	reverse_proxy paperless-ngx:8000 {
		import trusted_proxy_list
	}

	redir /flower /flower/
	handle /flower/* {
		reverse_proxy paperless-ngx:5555
	}
}

docs.{{ domain }} {
	forward_auth authelia:9091 {
		uri /api/verify?rd=https://auth.{{ domain }}
		copy_headers Remote-User

		# This import needs to be included if you're relying on a trusted proxies configuration.
		import trusted_proxy_list
	}

	reverse_proxy paperless-ngx:8000 {
		import trusted_proxy_list
	}

	redir /flower /flower/
	handle /flower/* {
		reverse_proxy paperless-ngx:5555
	}
}

logs.{{ domain }} {
	reverse_proxy parseable:8000
}

hey.kejadlen.dev
	reverse_proxy gotosocial:8080

	handle /metrics {
		respond 404
	}
}

# vim: ts=4