nixos-config/hosts/chunk/Caddyfile

{
  acme_ca https://acme.zerossl.com/v2/DV90
  acme_eab {
    key_id {$EAB_KEY_ID}
    mac_key {$EAB_MAC_KEY}
  }
}

(common) {
  encode zstd gzip
  header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
}

git.cything.io {
  import common

  # wrap in route so things are evaluated in the order written
  route {
    # rewrite gitlab URIs to make it work with forgejo
    uri path_regexp /-/ /
    uri replace /blob/ /src/
    redir https://git.cy7.sh{uri} permanent
  }
}

git.cy7.sh {
  import common
  reverse_proxy localhost:3000
}

rss.cy7.sh {
  import common
  reverse_proxy localhost:8080
}

photos.cy7.sh {
  import common
  reverse_proxy localhost:2283
}

chat.cything.io {
  import common
  reverse_proxy localhost:8448
}

pass.cy7.sh {
  import common
  reverse_proxy localhost:8081
}

dns.cything.io {
  import common
  reverse_proxy localhost:8082
}

pad.cything.io {
  import common
  reverse_proxy localhost:8085
}

red.cything.io {
  import common
  reverse_proxy localhost:8087
}

grafana.cything.io {
  import common
  reverse_proxy localhost:8088
}

element.cything.io {
  import common
  reverse_proxy localhost:8089
}

cache.cything.io {
  import common
  reverse_proxy localhost:8090
}

s3.cy7.sh {
  import common
  reverse_proxy localhost:3900
}

admin.s3.cy7.sh {
  import common
  reverse_proxy localhost:3903
}