caddyfile - Opengist

Rewizja cdc9e9e6188a4275c5265aa4910e7359f32f19b3

caddyfile · 2.5 KiB · Caddyfile Surowy

*.bread.one { tls internal } ##### VARS ##### (bx) { tls internal reverse_proxy 100.85.244.57:{args.0} } (mm) { tls internal reverse_proxy 100.101.68.46:{args.0} } (opc) { tls internal reverse_proxy 100.123.144.5:{args.0} } (auth) { handle /oauth2/* { reverse_proxy :4180 { header_up X-Real-IP {remote_host} header_up X-Forwarded-Uri {uri} } } handle { forward_auth :4180 { uri /oauth2/auth header_up X-Real-IP {remote_host} @error status 401 handle_response @error { redir * /oauth2/sign_in?rd={scheme}://{host}{uri} } } # If oauth2-proxy returns a 2xx status, the request is then proxied to the upstream. map {args.0} {server} { bx 100.85.244.57 mm 100.101.68.46 } reverse_proxy {server}:{args.1} } } ##### INTERNAL SERVERS ##### acme.bread.one { # ca url: https://acme.bread.one/acme/local/directory acme_server { tls { issuer internal } } } cert.bread.one:80 { root * /var/www/rootCert file_server { index bpi.crt } } dns.bread.one { reverse_proxy :5380 } sec.bread.one { # oauth2-proxy reverse_proxy :4180 } up.bread.one { reverse_proxy :3001 } ##### MACMINI SERVERS ##### photos.bread.one { # Copyparty import mm 3923 } ##### BREADBOX SERVERS ##### affine.bread.one { import bx 3010 } cal.bread.one { # Radicale import bx 5232 } chd.bread.one { # Changedetection import bx 5050 } cook.bread.one { # Norish import bx 9123 } cook2.bread.one { # Recipie import bx 4321 } files.bread.one { # Copyparty import bx 3923 } frigate.bread.one { import bx 8970 } git.bread.one { # Gitea import bx 5000 } gist.bread.one { # Opengist import bx 6157 } home.bread.one { # HomeAssistant import bx 8123 } jf.bread.one { # Jellyfin import bx 8096 } keep.bread.one { # Karakeep import bx 1079 } lidarr.bread.one { # Lidarr import bx 8686 } linkwarden.bread.one { import bx 7283 } mail.bread.one { # Stalwart import bx 1280 } memos.bread.one { # Memos import bx 5230 } mqtt.bread.one { # Mosquitto import bx 1883 } n8n.bread.one { # n8n import bx 5678 } notes.bread.one { # Notesnook import bx 5264 } nzb.bread.one { # NZBGet import bx 6789 } qbt.bread.one { # QBittorrent import bx 8080 } radarr.bread.one { # Radarr import bx 7878 } sonarr.bread.one { # Sonarr import bx 8989 } speedtest.bread.one { import bx 1300 } stash.bread.one { # Stash import auth bx 9999 } wiki.bread.one { # Outline import bx 3000 } ##### OPC ##### status.bread.one { import opc 8190 } ##### END #####

1	*.bread.one {
2	tls internal
3	}
4
5	##### VARS #####
6
7	(bx) {
8	tls internal
9	reverse_proxy 100.85.244.57:{args.0}
10	}
11
12	(mm) {
13	tls internal
14	reverse_proxy 100.101.68.46:{args.0}
15	}
16
17	(opc) {
18	tls internal
19	reverse_proxy 100.123.144.5:{args.0}
20	}
21
22	(auth) {
23	handle /oauth2/* {
24	reverse_proxy :4180 {
25	header_up X-Real-IP {remote_host}
26	header_up X-Forwarded-Uri {uri}
27	}
28	}
29
30	handle {
31	forward_auth :4180 {
32	uri /oauth2/auth
33
34	header_up X-Real-IP {remote_host}
35
36	@error status 401
37	handle_response @error {
38	redir * /oauth2/sign_in?rd={scheme}://{host}{uri}
39	}
40	}
41
42	# If oauth2-proxy returns a 2xx status, the request is then proxied to the upstream.
43
44	map {args.0} {server} {
45	bx 100.85.244.57
46	mm 100.101.68.46
47	}
48	reverse_proxy {server}:{args.1}
49	}
50
51
52	}
53
54	##### INTERNAL SERVERS #####
55
56	acme.bread.one {
57	# ca url: https://acme.bread.one/acme/local/directory
58	acme_server {
59	tls {
60	issuer internal
61	}
62	}
63	}
64
65	cert.bread.one:80 {
66	root * /var/www/rootCert
67	file_server {
68	index bpi.crt
69	}
70	}
71
72	dns.bread.one {
73	reverse_proxy :5380
74	}
75
76	sec.bread.one { # oauth2-proxy
77	reverse_proxy :4180
78	}
79
80	up.bread.one {
81	reverse_proxy :3001
82	}
83
84	##### MACMINI SERVERS #####
85
86	photos.bread.one { # Copyparty
87	import mm 3923
88	}
89
90	##### BREADBOX SERVERS #####
91
92	affine.bread.one {
93	import bx 3010
94	}
95
96	cal.bread.one { # Radicale
97	import bx 5232
98	}
99
100	chd.bread.one { # Changedetection
101	import bx 5050
102	}
103
104	cook.bread.one { # Norish
105	import bx 9123
106	}
107
108	cook2.bread.one { # Recipie
109	import bx 4321
110	}
111
112	files.bread.one { # Copyparty
113	import bx 3923
114	}
115
116	frigate.bread.one {
117	import bx 8970
118	}
119
120	git.bread.one { # Gitea
121	import bx 5000
122	}
123
124	gist.bread.one { # Opengist
125	import bx 6157
126	}
127
128	home.bread.one { # HomeAssistant
129	import bx 8123
130	}
131
132	jf.bread.one { # Jellyfin
133	import bx 8096
134	}
135
136	keep.bread.one { # Karakeep
137	import bx 1079
138	}
139
140	lidarr.bread.one { # Lidarr
141	import bx 8686
142	}
143
144	linkwarden.bread.one {
145	import bx 7283
146	}
147
148	mail.bread.one { # Stalwart
149	import bx 1280
150	}
151
152	memos.bread.one { # Memos
153	import bx 5230
154	}
155
156	mqtt.bread.one { # Mosquitto
157	import bx 1883
158	}
159
160	n8n.bread.one { # n8n
161	import bx 5678
162	}
163
164	notes.bread.one { # Notesnook
165	import bx 5264
166	}
167
168	nzb.bread.one { # NZBGet
169	import bx 6789
170	}
171
172	qbt.bread.one { # QBittorrent
173	import bx 8080
174	}
175
176	radarr.bread.one { # Radarr
177	import bx 7878
178	}
179
180	sonarr.bread.one { # Sonarr
181	import bx 8989
182	}
183
184	speedtest.bread.one {
185	import bx 1300
186	}
187
188	stash.bread.one { # Stash
189	import auth bx 9999
190	}
191
192	wiki.bread.one { # Outline
193	import bx 3000
194	}
195
196	##### OPC #####
197
198	status.bread.one {
199	import opc 8190
200	}
201
202	##### END #####
203
204
205