Update comfigs for best practices

caddy/compose.yml

@@ -5,11 +5,12 @@ services:
     restart: unless-stopped
     cap_add:
       - NET_ADMIN
+    env_file:
+      - .env
     environment:
       - PUID=1000
       - PGID=1000
       - TZ=America/Los_Angeles
-      - CLOUDFLARE_API_TOKEN=cfat_yPhy6H6v3Yr83YdNuJQeS4lgfxzd7X2U1OpMX4gp07cf50fe
     ports:
       - "80:80"
       - "443:443"
@@ -20,6 +21,17 @@ services:
       - ./conf:/etc/caddy
       - /mnt/storage/apps/caddy/data:/data
       - /mnt/storage/apps/caddy/config:/config
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:80"]
+      interval: 30s
+      timeout: 10s
+      retries: 3
+      start_period: 20s
+    deploy:
+      resources:
+        limits:
+          memory: 512M
+          cpus: '0.5'
     networks:
       - proxy
 

caddy/conf/Caddyfile

@@ -20,6 +20,12 @@
         reverse_proxy radarr:7878
     }
 
+    @immich host photos.wampler.us
+    handle @immich {
+        encode gzip
+        reverse_proxy immich_server:2283
+    }
+
     @vaultwarden host vault.wampler.us
     handle @vaultwarden {
         encode gzip
@@ -37,6 +43,30 @@
         encode gzip
         reverse_proxy host.docker.internal:8112
     }
+
+    @dockge host dockge.wampler.us
+    handle @dockge {
+        encode gzip
+        reverse_proxy dockge:5001
+    }
+
+    @navidrome host music.wampler.us
+    handle @navidrome {
+        encode gzip
+        reverse_proxy navidrome:4533
+    }
+
+    @authentik host auth.wampler.us
+    handle @authentik {
+        encode gzip
+        reverse_proxy authentik_server:9000
+    }
+
+    @lidarr host lidarr.wampler.us
+    handle @lidarr {
+        encode gzip
+        reverse_proxy lidarr:8686
+    }
 }
 
 localhost {