Initial configuration

caddy/Dockerfile

@@ -0,0 +1,8 @@
+FROM caddy:2.8-builder AS builder
+
+RUN xcaddy build \
+  --with github.com/caddy-dns/cloudflare
+
+FROM caddy:2.8
+
+COPY --from=builder /usr/bin/caddy /usr/bin/caddy

caddy/README.md

@@ -0,0 +1,4 @@
+# Caddy reverse proxy
+
+1. Obtain cloudflare tokens: [Caddy Cloudflare](https://github.com/caddy-dns/cloudflare)
+2. Set environment variables

caddy/caddyfiles/Caddyfile

@@ -0,0 +1,21 @@
+localhost {
+	respond "Hello world!"
+}
+
+
+*.timo.bmrs.nl timo.bmrs.nl {
+	tls {
+		dns cloudflare {
+			zone_token {env.CF_ZONE_TOKEN}
+			api_token {env.CF_API_TOKEN}
+		}
+		resolvers 1.1.1.1
+	}
+
+	forward_auth authelia:9091 {
+		uri /api/authz/forward-auth
+		copy_headers Remote-User Remote-Groups Remote-Email Remote-Name		
+	}
+
+	import routes/*
+}

caddy/caddyfiles/routes/adguard

@@ -0,0 +1,4 @@
+@adguard host adguard.timo.bmrs.nl
+handle @adguard {
+	reverse_proxy adguardhome:3000
+}

caddy/caddyfiles/routes/authelia

@@ -0,0 +1,9 @@
+@ldap host ldap.timo.bmrs.nl
+handle @ldap {
+	reverse_proxy lldap:17170
+}
+
+@authelia host auth.timo.bmrs.nl
+handle @authelia {
+	reverse_proxy authelia:9091
+}

caddy/caddyfiles/routes/dozzle

@@ -0,0 +1,9 @@
+@dozzle host dozzle.timo.bmrs.nl
+handle @dozzle {
+	forward_auth authelia:9091 {
+		uri /api/authz/forward-auth
+		copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
+	}
+
+	reverse_proxy dozzle:8080
+}

caddy/caddyfiles/routes/forgejo

@@ -0,0 +1,4 @@
+@forgejo host git.timo.bmrs.nl
+handle @forgejo {
+	reverse_proxy forgejo:3000
+}

caddy/caddyfiles/routes/homeassistant

@@ -0,0 +1,4 @@
+@homeassistant host homeassistant.timo.bmrs.nl
+handle @homeassistant {
+	reverse_proxy homeassistant:8123
+}

caddy/caddyfiles/routes/homepage

@@ -0,0 +1,4 @@
+@homepage host home.timo.bmrs.nl
+handle @homepage {
+	reverse_proxy homepage:3000
+}

caddy/caddyfiles/routes/immich

@@ -0,0 +1,4 @@
+@immich host immich.timo.bmrs.nl
+handle @immich {
+	reverse_proxy immich:2283
+}

caddy/caddyfiles/routes/nextcloud

@@ -0,0 +1,12 @@
+@nextcloud host cloud.timo.bmrs.nl
+handle @nextcloud {
+	redir /.well-known/carddav /remote.php/dav/ 301
+    redir /.well-known/caldav /remote.php/dav/ 301
+
+	reverse_proxy nextcloud:80
+}
+
+@office host office.timo.bmrs.nl
+handle @office {
+	reverse_proxy nextcloud-office:9980
+}

caddy/caddyfiles/routes/paperless-ngx

@@ -0,0 +1,4 @@
+@paperless-ngx host paperless.timo.bmrs.nl
+handle @paperless-ngx {
+	reverse_proxy paperless-ngx:8000
+}

caddy/caddyfiles/routes/searxng

@@ -0,0 +1,4 @@
+@searxng host search.timo.bmrs.nl
+handle @searxng {
+	reverse_proxy searxng:8080
+}

caddy/caddyfiles/routes/uptime-kuma

@@ -0,0 +1,4 @@
+@uptime-kuma host uptime.timo.bmrs.nl
+handle @uptime-kuma {
+	reverse_proxy uptime-kuma:3001
+}

caddy/caddyfiles/routes/vaultwarden

@@ -0,0 +1,4 @@
+@vaultwarden host bitwarden.timo.bmrs.nl
+handle @vaultwarden {
+	reverse_proxy vaultwarden:80
+}

caddy/docker-compose.yml

@@ -0,0 +1,33 @@
+services:
+  caddy:
+    build: .
+    container_name: caddy
+    restart: unless-stopped
+    cap_add:
+      - NET_ADMIN
+    ports:
+      - 80:80
+      - 443:443
+      - 443:443/udp
+    volumes:
+      - data:/data
+      - config:/config
+      - ./caddyfiles:/etc/caddy/
+    environment:
+      CF_ZONE_TOKEN: ${CF_ZONE_TOKEN}
+      CF_API_TOKEN: ${CF_API_TOKEN}
+    networks:
+      proxy:
+        aliases:
+          - auth.timo.bmrs.nl
+          - cloud.timo.bmrs.nl
+          - office.timo.bmrs.nl
+
+volumes:
+  data:
+  config:
+
+networks:
+  proxy:
+    name: proxy
+    external: true