diff --git a/reverseproxy2/caddy/Caddyfile b/reverseproxy2/caddy/Caddyfile index 67365c1..200919f 100644 --- a/reverseproxy2/caddy/Caddyfile +++ b/reverseproxy2/caddy/Caddyfile @@ -4,8 +4,6 @@ { acme_ca https://acme-staging-v02.api.letsencrypt.org/directory - admin :2019 - servers { trusted_proxies static private_ranges } @@ -18,7 +16,7 @@ (cloudflare) { tls { - dns cloudflare BI5kO2I9fHAqso_OClKxbUM6xTCodH2OfQ60yNp3 + dns cloudflare {env.DNS_PROVIDER_TOKEN} resolvers 1.1.1.1 1.0.0.1 } } @@ -28,7 +26,7 @@ # -------------------------------------------------- (auth) { - forward_auth localhost:9091 { + forward_auth authelia:9091 { uri /api/authz/forward-auth copy_headers Remote-User Remote-Groups Remote-Email Remote-Name } @@ -40,10 +38,10 @@ wettsten.com { import cloudflare - @akanealwcom host wettsten.com - handle @akanealwcom { + @wettstencom host wettsten.com + handle @wettstencom { import auth - reverse_proxy 192.168.1.4:3005 + reverse_proxy 192.168.86.243:8085 } } @@ -53,7 +51,7 @@ wettsten.com { auth.wettsten.com { import cloudflare - reverse_proxy localhost:9091 + reverse_proxy authelia:9091 } # -------------------------------------------------- @@ -68,7 +66,7 @@ auth.wettsten.com { # @ host .wettsten.com # handle @ { # handle @internal { - # reverse_proxy 192.168.1. + # reverse_proxy 192.168.86. # } # respond "ip range not allowed" # } @@ -77,7 +75,7 @@ auth.wettsten.com { # @ host .wettsten.com # handle @ { # handle @internal { - # reverse_proxy https://192.168.1. { + # reverse_proxy https://192.168.86. { # transport http { # tls_insecure_skip_verify # } @@ -92,10 +90,10 @@ auth.wettsten.com { @external not client_ip 192.168.0.0/16 172.16.0.0/12 10.0.0.0/8 127.0.0.1/8 import cloudflare - @adguard1 host adguardserver1.wettsten.com - handle @adguard1 { + @adguard host adguard.wettsten.com + handle @adguard { handle @internal { - reverse_proxy 192.168.1.2:80 + reverse_proxy 192.168.86.245:80 } respond "ip range not allowed" } @@ -103,39 +101,23 @@ auth.wettsten.com { @bale host bale.wettsten.com handle @bale { handle @internal { - reverse_proxy 192.168.1.51:8080 + reverse_proxy 192.168.86.241:8080 } respond "ip range not allowed" } - @dockerdockge host dockerserver-dockge.wettsten.com - handle @dockerdockge { + @dozzle host dozzle.wettsten.com + handle @dozzle { handle @internal { - reverse_proxy 192.168.1.30:5001 + reverse_proxy 192.168.86.243:9999 } respond "ip range not allowed" } - @dockerdozzle host dockerserver-dozzle.wettsten.com - handle @dockerdozzle { + @proxmox host proxmox.wettsten.com + handle @proxmox { handle @internal { - reverse_proxy 192.168.1.30:8080 - } - respond "ip range not allowed" - } - - @gluetun host gluetun.wettsten.com - handle @gluetun { - handle @internal { - reverse_proxy 192.168.1.30:8777 - } - respond "ip range not allowed" - } - - @proxmox1 host proxmox1.wettsten.com - handle @proxmox1 { - handle @internal { - reverse_proxy https://192.168.1.51:8006 { + reverse_proxy https://192.168.86.241:8006 { transport http { tls_insecure_skip_verify } @@ -147,7 +129,7 @@ auth.wettsten.com { @proxmoxbackup host proxmoxbackup.wettsten.com handle @proxmoxbackup { handle @internal { - reverse_proxy https://192.168.1.51:8007 { + reverse_proxy https://192.168.86.241:8007 { transport http { tls_insecure_skip_verify } @@ -159,7 +141,7 @@ auth.wettsten.com { @router host router.wettsten.com handle @router { handle @internal { - reverse_proxy https://192.168.1.1:443 { + reverse_proxy https://192.168.86.1:443 { transport http { tls_insecure_skip_verify } @@ -168,10 +150,10 @@ auth.wettsten.com { respond "ip range not allowed" } - @speedtest host speedtest.wettsten.com - handle @speedtest { + @portainer host portainer.wettsten.com + handle @portainer { handle @internal { - reverse_proxy 192.168.1.30:8765 + reverse_proxy 192.168.86.243:9000 } respond "ip range not allowed" } @@ -179,7 +161,7 @@ auth.wettsten.com { @webmin host webmin.wettsten.com handle @webmin { handle @internal { - reverse_proxy https://192.168.1.51:10000 { + reverse_proxy https://192.168.86.241:10000 { transport http { tls_insecure_skip_verify } @@ -194,7 +176,7 @@ auth.wettsten.com { # # @ host .wettsten.com # handle @ { - # reverse_proxy 192.168.1. + # reverse_proxy 192.168.86. # } # # @@ -202,12 +184,12 @@ auth.wettsten.com { @bitwarden host bitwarden.wettsten.com handle @bitwarden { - reverse_proxy 192.168.1.4:8089 + reverse_proxy 192.168.86.243:8089 } @jellyfin host jellyfin.wettsten.com handle @jellyfin { - reverse_proxy 192.168.1.42:8096 + reverse_proxy 192.168.86.243:8096 } # -------------------------------------------------- @@ -217,7 +199,7 @@ auth.wettsten.com { # @ host .wettsten.com # handle @ { # import auth - # reverse_proxy 192.168.1. + # reverse_proxy 192.168.86. # } # # @ host .wettsten.com @@ -225,7 +207,7 @@ auth.wettsten.com { # handle @external { # import auth # } - # reverse_proxy 192.168.1. + # reverse_proxy 192.168.86. # } # # -------------------------------------------------- @@ -233,156 +215,131 @@ auth.wettsten.com { @whoami host whoami.wettsten.com handle @whoami { import auth - reverse_proxy localhost:80 - } - - @filebrowser host filebrowser.wettsten.com - handle @filebrowser { - import auth - reverse_proxy 192.168.1.30:8484 + reverse_proxy whoami:80 } @archive host archive.wettsten.com handle @archive { import auth - reverse_proxy 192.168.1.30:8283 + reverse_proxy 192.168.86.243:8283 } - @archivebox host archivebox.wettsten.com - handle @archivebox { + @bazarr host bazarr.wettsten.com + handle @bazarr { import auth - reverse_proxy 192.168.1.30:8283 + reverse_proxy 192.168.86.243:6767 } - @codeserver host codeserver.wettsten.com - handle @codeserver { + @filebrowser host filebrowser.wettsten.com + handle @filebrowser { import auth - reverse_proxy 192.168.1.50:3001 - } - - @freshrss host freshrss.wettsten.com - handle @freshrss { - import auth - reverse_proxy 192.168.1.30:8088 + reverse_proxy 192.168.86.243:8484 } @jackett host jackett.wettsten.com handle @jackett { import auth - reverse_proxy 192.168.1.30:9117 + reverse_proxy 192.168.86.243:9117 } @jdownloader host jdownloader.wettsten.com handle @jdownloader { import auth - reverse_proxy 192.168.1.30:5800 - } - - @jellyseerr host jellyseerr.wettsten.com - handle @jellyseerr { - import auth - reverse_proxy 192.168.1.30:5056 - } - - @kavita host kavita.wettsten.com - handle @kavita { - import auth - reverse_proxy 192.168.1.30:5002 + reverse_proxy 192.168.86.243:5800 } @lidarr host lidarr.wettsten.com handle @lidarr { import auth - reverse_proxy 192.168.1.30:8686 + reverse_proxy 192.168.86.243:8686 } @metube host metube.wettsten.com handle @metube { import auth - reverse_proxy 192.168.1.30:8082 + reverse_proxy 192.168.86.243:8082 + } + + @monitorr host monitorr.wettsten.com + handle @monitorr { + import auth + reverse_proxy 192.168.86.243:8084 } @mstream host mstream.wettsten.com handle @mstream { import auth - reverse_proxy 192.168.1.30:3001 + reverse_proxy 192.168.86.243:3001 } + @nvr host nvr.wettsten.com + handle @nvr { + import auth + reverse_proxy https://192.168.86.100:443 { + transport http { + tls_insecure_skip_verify + } + } + } + @nzbhydra host nzbhydra.wettsten.com handle @nzbhydra { import auth - reverse_proxy 192.168.1.30:5076 + reverse_proxy 192.168.86.243:5076 } @olivetin host olivetin.wettsten.com handle @olivetin { import auth - reverse_proxy 192.168.1.30:1337 - } - - @opengist host opengist.wettsten.com - handle @opengist { - import auth - reverse_proxy 192.168.1.4:6157 - } - - @paperless host paperless.wettsten.com - handle @paperless { - import auth - reverse_proxy 192.168.1.30:8112 + reverse_proxy 192.168.86.243:1337 } @prowlarr host prowlarr.wettsten.com handle @prowlarr { import auth - reverse_proxy 192.168.1.30:9696 + reverse_proxy 192.168.86.243:9696 } @qbittorrent host qbittorrent.wettsten.com handle @qbittorrent { import auth - reverse_proxy 192.168.1.30:8282 + reverse_proxy 192.168.86.243:8282 } @radarr host radarr.wettsten.com handle @radarr { import auth - reverse_proxy 192.168.1.30:7878 + reverse_proxy 192.168.86.243:7878 } @sabnzbd host sabnzbd.wettsten.com handle @sabnzbd { import auth - reverse_proxy 192.168.1.30:8181 - } - - @shlinkweb host shlink.wettsten.com - handle @shlinkweb { - import auth - reverse_proxy 192.168.1.30:8381 + reverse_proxy 192.168.86.243:8181 } @sonarr host sonarr.wettsten.com handle @sonarr { import auth - reverse_proxy 192.168.1.30:8989 + reverse_proxy 192.168.86.243:8989 } @spdf host spdf.wettsten.com handle @spdf { import auth - reverse_proxy 192.168.1.30:8086 + reverse_proxy 192.168.86.243:8086 } - @ittools host it-tools.wettsten.com - handle @ittools { + @uptime host uptime.wettsten.com + handle @uptime { import auth - reverse_proxy 192.168.1.30:8383 + reverse_proxy 192.168.86.243:3002 } - @wikidocs host wiki.wettsten.com - handle @wikidocs { + @www host www.wettsten.com + handle @wwww { import auth - reverse_proxy 192.168.1.30:8022 + reverse_proxy 192.168.86.243:8085 } + }