{
	servers {
		trusted_proxies static private_ranges
		trusted_proxies_strict
	}
}

(secure) {
  header {
      Cache-Control "no-cache, no-store, must-revalidate"
  }

  forward_auth authelia:9091 {
    uri /api/authz/forward-auth
    copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
  }
}

auth.64815139.xyz {
  reverse_proxy authelia:9091
}

www.64815139.xyz {
  import secure *

  root * /var/www/dashboard
  encode gzip
  file_server

  log {
    output file /var/log/caddy/dashboard.log
  }
}

64815139.xyz {
    redir https://www.{host}{uri}
}

gitea.64815139.xyz {
    rewrite /user/login /user/oauth2/Authelia
    reverse_proxy 192.168.0.221:3000
}

immich.64815139.xyz {
  reverse_proxy 192.168.0.221:2283
}