system-config/caddy/conf/Caddyfile

{
  email james@wampler.us
}

*.wampler.us {
    tls {
        dns cloudflare {env.CLOUDFLARE_API_TOKEN}
        resolvers 1.1.1.1
    }

    @sonarr host tv.wampler.us
    handle @sonarr {
        encode gzip
        reverse_proxy sonarr:8989
    }

    @radarr host movies.wampler.us
    handle @radarr {
        encode gzip
        reverse_proxy radarr:7878
    }

    @immich host photos.wampler.us
    handle @immich {
        encode gzip
        reverse_proxy immich_server:2283
    }

    @vaultwarden host vault.wampler.us
    handle @vaultwarden {
        encode gzip
        reverse_proxy vaultwarden:80
    }

    @gitea host git.wampler.us
    handle @gitea {
        encode gzip
        reverse_proxy gitea:3000
    }

    @qbittorrent host seed.wampler.us
    handle @qbittorrent {
        encode gzip
        reverse_proxy host.docker.internal:8112
    }

    @dockge host dockge.wampler.us
    handle @dockge {
        encode gzip
        reverse_proxy dockge:5001
    }

    @navidrome host music.wampler.us
    handle @navidrome {
        encode gzip
        reverse_proxy navidrome:4533
    }

    @authentik host auth.wampler.us
    handle @authentik {
        encode gzip
        reverse_proxy authentik_server:9000
    }

    @lidarr host lidarr.wampler.us
    handle @lidarr {
        encode gzip
        reverse_proxy lidarr:8686
    }

    @calibre-web host books.wampler.us
    handle @calibre-web {
        encode gzip
        reverse_proxy calibre-web:8083
    }

    @vikunja host tasks.wampler.us
    handle @vikunja {
        encode gzip
        reverse_proxy vikunja:3456
    }
}

localhost {
    respond "Hello, world!"
}

admin.miccheck-qa.com {
    tls internal
    encode gzip
    reverse_proxy admin:80
}

api.miccheck-qa.com {
    tls internal
    encode gzip
    reverse_proxy api:8080
}