From 2e510b9851bf55213a90c45d05372a318483aa09 Mon Sep 17 00:00:00 2001
From: James Wampler <james@wamp.dev>
Date: Mon, 6 Jul 2026 14:03:34 -0700
Subject: [PATCH] feat(caddy): expose miccheck-qa admin/api on local domains

Joins caddy to miccheck-qa-net so it can reverse-proxy to the
admin/api containers by name. Uses self-signed internal TLS since
miccheck-qa.com is a local-only hosts-file domain, not a real zone.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
---
 caddy/compose.yml    |  4 ++++
 caddy/conf/Caddyfile | 12 ++++++++++++
 2 files changed, 16 insertions(+)

diff --git a/caddy/compose.yml b/caddy/compose.yml
index de87391..b4c823d 100644
--- a/caddy/compose.yml
+++ b/caddy/compose.yml
@@ -34,8 +34,12 @@ services:
           cpus: '0.5'
     networks:
       - proxy
+      - miccheck-qa-net
 
 networks:
   proxy:
     name: proxy
     external: true
+  miccheck-qa-net:
+    name: miccheck-qa-net
+    external: true
diff --git a/caddy/conf/Caddyfile b/caddy/conf/Caddyfile
index 7f8c56f..aded145 100755
--- a/caddy/conf/Caddyfile
+++ b/caddy/conf/Caddyfile
@@ -84,3 +84,15 @@
 localhost {
     respond "Hello, world!"
 }
+
+admin.miccheck-qa.com {
+    tls internal
+    encode gzip
+    reverse_proxy admin:80
+}
+
+api.miccheck-qa.com {
+    tls internal
+    encode gzip
+    reverse_proxy api:8080
+}