container-server/proxy/Caddyfile

# header / Strict-Transport-Security "max-age=31536000;"

# http://autoconfig.{$BASE_DOMAIN} {
#     log / stdout "{host} - {common}"
#     errors stdout
#     root /srv/autoconfig
# }

https://proxy.{$BASE_DOMAIN} {
    import config/common
    tls {$TLS_EMAIL} {
        key_type rsa4096
    }
    on certrenew echo reload | nc reloader:9000

    root /srv/homepage
    git {
        repo ssh://git@gitea:/carsten/homepage.git
        path /build/homepage
        key /root/deploy_keys/caddy
        hook /__gitea_hook__ lajrbgclnusgtbmslgtbec
        clone_args --recurse-submodules
        pull_args --recurse-submodules
        then hugo --cleanDestinationDir --destination /srv/homepage
    }
    proxy /_matrix matrix:8008 {
        transparent
    }
}

# https://{$BASE_DOMAIN}:8448 {
#     import config/common
#     proxy / matrix:8008 {
#         transparent
#     }
# }

https://echo.{$BASE_DOMAIN} {
    import config/common
    proxy / echo:8000 {
        transparent
    }
}

https://ci-demo.{$BASE_DOMAIN} {
    import config/common
    proxy / docker-ci-demo:8000 {
        transparent
    }
}

# https://stuff.{$BASE_DOMAIN} {
#     import config/common
#     root /srv/stuff
#     browse
#     basicauth /dev dev {$DEV_PASS}
# }

https://cloud.{$BASE_DOMAIN} {
    import config/common
    proxy / nextcloud:80 {
        transparent
    }
    redir {
        /.well-known/carddav /remote.php/dav
        /.well-known/caldav /remote.php/dav
        /.well-known/webfinger /public.php?service=webfinger
    }
}

https://bitwarden.{$BASE_DOMAIN} {
    import config/common
    proxy /notifications/hub/negotiate bitwarden:80 {
        transparent
    }
    proxy /notifications/hub bitwarden:3012 {
        websocket
    }
    proxy / bitwarden:80 {
        transparent
    }
}

https://git.{$BASE_DOMAIN} {
    import config/common
    proxy / gitea:3000 {
        transparent
    }
}

https://ci.{$BASE_DOMAIN} {
    import config/common
    proxy / drone:80 {
        transparent
    }
}

https://hackmd-next.{$BASE_DOMAIN} {
    import config/common
    proxy / codimd:3000 {
        transparent
    }
}

https://md.{$BASE_DOMAIN} {
    import config/common
    proxy / non-existent:3000 {
        transparent
    }
}