container-server/proxy/Caddyfile

# header / Strict-Transport-Security "max-age=31536000;"

http://autoconfig.{$BASE_DOMAIN} {
    log / stdout "{host} - {common}"
    errors stdout
    root /srv/autoconfig
}

https://{$BASE_DOMAIN} {
    import config/common
    tls {$TLS_EMAIL} {
        key_type rsa4096
    }
    on certrenew echo reload | nc reloader:9000

    root /srv/homepage
    git {
        repo ssh://git@gitlab.csprung.de:vserver/homepage.git
        path /build/homepage
        key /root/deploy_keys/caddy
        hook /__gitlab_hook__
        clone_args --recurse-submodules
        pull_args --recurse-submodules
        then hugo --cleanDestinationDir --destination /srv/homepage
    }
    proxy /_matrix matrix:8008 {
        transparent
    }
}

https://{$BASE_DOMAIN}:8448 {
    import config/common
    proxy / matrix:8008 {
        transparent
    }
}

https://echo.{$BASE_DOMAIN} {
    import config/common
    proxy / echo:8000 {
        transparent
    }
}

https://ci-echo.{$BASE_DOMAIN} {
    import config/common
    proxy / docker-ci-example:8000 {
        transparent
    }
}

https://stuff.{$BASE_DOMAIN} {
    import config/common
    root /srv/stuff
    browse
    basicauth /dev dev {$DEV_PASS}
}

https://cloud.{$BASE_DOMAIN} {
    import config/common
    proxy / nextcloud:80 {
        transparent
    }
    redir {
        /.well-known/carddav /remote.php/dav
        /.well-known/caldav /remote.php/dav
        /.well-known/webfinger /public.php?service=webfinger
    }
}

https://bitwarden.{$BASE_DOMAIN} {
    import config/common
    proxy /notifications/hub/negotiate bitwarden:80 {
        transparent
    }
    proxy /notifications/hub bitwarden:3012 {
        websocket
    }
    proxy / bitwarden:80 {
        transparent
    }
}

https://git.{$BASE_DOMAIN} {
    import config/common
    proxy / gitea:3000 {
        transparent
    }
}

https://ci.{$BASE_DOMAIN} {
    import config/common
    proxy / drone:80 {
        transparent
    }
}

https://notes.{$BASE_DOMAIN} {
    import config/common
    proxy / codimd:3000 {
        transparent
    }
}