# --------------------------------------------------
# global options
# --------------------------------------------------
{
	acme_ca https://acme-v02.api.letsencrypt.org/directory

	admin :2019
	log {
		output file /var/log/caddy/caddy.log
		level info
	}

	servers {
		trusted_proxies static private_ranges
	}

	crowdsec {
		api_url http://localhost:8080
		api_key uok9y/eKet7rhXxxGvgUNmMiKsAxxh2JJd4rsGvCDoE
		ticker_interval 15s
		#disable_streaming
		#enable_hard_fails
	}
}

# --------------------------------------------------
# cloudflare tls snippet for sites
# --------------------------------------------------

(cloudflare) {
	tls {
		dns cloudflare BI5kO2I9fHAqso_OClKxbUM6xTCodH2OfQ60yNp3
		resolvers 1.1.1.1 1.0.0.1
	}
}

# --------------------------------------------------
# auth snippet for authelia
# --------------------------------------------------

(auth) {
	forward_auth localhost:9091 {
		uri /api/authz/forward-auth
		copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
	}
}

# --------------------------------------------------
# akanealw.com root domain
# --------------------------------------------------

akanealw.com {
	import cloudflare
	@akanealwcom host akanealw.com
	handle @akanealwcom {
		import auth
		reverse_proxy 192.168.1.4:3005
	}
}

# --------------------------------------------------
# authelia subdomain
# --------------------------------------------------

auth.akanealw.com {
	import cloudflare
	reverse_proxy localhost:9091
}

# --------------------------------------------------
# *.akanealw.com subdomains
# --------------------------------------------------

import *.caddy

# --------------------------------------------------
# aknlw.com root domain
# --------------------------------------------------

aknlw.com {
	import cloudflare
	@shlink host aknlw.com
	handle @shlink {
		reverse_proxy 192.168.1.30:8380
	}
}

# --------------------------------------------------
# *.aknlw.com subdomains
# --------------------------------------------------

repo.aknlw.com {
	import cloudflare
	reverse_proxy 192.168.1.50:3000
}