Add a bunch of dynamic - LAN only configs for services

This commit is contained in:
Sparky
2025-10-27 18:26:50 +00:00
parent 8a682d7fb4
commit ac7d5a2450
20 changed files with 270 additions and 28 deletions

View File

@@ -1,3 +1,7 @@
{
debug
}
import /dynamic/*.caddy
https://actual.site.quack-lab.dev {
encode zstd gzip
handle_path /* {
@@ -14,14 +18,6 @@ https://adguard.site.quack-lab.dev {
header -Server
try_files {path} /index.html /index.php
}
https://affine.site.quack-lab.dev {
encode zstd gzip
handle_path /* {
reverse_proxy 10.0.42.4:3010
}
header -Server
try_files {path} /index.html /index.php
}
https://authwarden.site.quack-lab.dev {
encode zstd gzip
handle_path /* {
@@ -221,13 +217,6 @@ https://pocketbase-shoppinglist.site.quack-lab.dev {
header -Server
try_files {path} /index.html /index.php
}
https://pocketbase-truckermajster.site.quack-lab.dev {
handle_path /* {
reverse_proxy 10.0.57.3:8080
}
header -Server
try_files {path} /index.html /index.php
}
https://pocketbase-youtube-seencounter.site.quack-lab.dev {
encode zstd gzip
handle_path /* {

File diff suppressed because one or more lines are too long

View File

@@ -0,0 +1,49 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@@ -0,0 +1,9 @@
{
"sans": [
"prometheus.site.quack-lab.dev"
],
"issuer_data": {
"url": "https://acme-v02.api.letsencrypt.org/acme/cert/0624d9d5bddb5bda9f3d67d18e22d0625b54",
"ca": "https://acme-v02.api.letsencrypt.org/directory"
}
}

View File

@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIF2bUBU2RPjuYQOrC0aycttGmgbSsYvvsqEcY9DYCnYhoAoGCCqGSM49
AwEHoUQDQgAE/Hyo8n4uSgWjm+1IOAaonEHlp2B7kl17kolxSg8Qdv3ySqq4EKW3
JpHzikC7nw721TSyY+OBwR8NoYC5rN0BHg==
-----END EC PRIVATE KEY-----

View File

@@ -0,0 +1,49 @@
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

View File

@@ -0,0 +1,9 @@
{
"sans": [
"vmagent.site.quack-lab.dev"
],
"issuer_data": {
"url": "https://acme-v02.api.letsencrypt.org/acme/cert/058dcb83920e7aaa4a4d295516fb63214bf2",
"ca": "https://acme-v02.api.letsencrypt.org/directory"
}
}

View File

@@ -0,0 +1,5 @@
-----BEGIN EC PRIVATE KEY-----
MHcCAQEEIBeHWiqJoGAoWcdRBV6RRyXt4kC7tPIIlIayjeIeu/cGoAoGCCqGSM49
AwEHoUQDQgAE7kXyhu18He4+76Bdkf2ro+IVAJG7tp1NrXiY1lUUaPPiaEcTw8HL
DmRTM44iX4uh9E+ihYEwe3kDr3xzQYtueA==
-----END EC PRIVATE KEY-----

View File

@@ -1 +1,4 @@
{
debug
}
import /dynamic/*.caddy

View File

@@ -0,0 +1,11 @@
actual.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy actual_server:5006
}
handle {
respond "Njet Molotoff" 403
}
}

View File

@@ -0,0 +1,11 @@
grist.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy grist:8484
}
handle {
respond "Njet Molotoff" 403
}
}

View File

@@ -1,8 +0,0 @@
*.site.quack-lab.dev {
debug
root * /usr/share/caddy
file_server
log {
output stdout
}
}

View File

@@ -0,0 +1,11 @@
meili-web.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy meili-web:24900
}
handle {
respond "Njet Molotoff" 403
}
}

View File

@@ -0,0 +1,11 @@
meili.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy meilisearch:7700
}
handle {
respond "Njet Molotoff" 403
}
}

View File

@@ -0,0 +1,35 @@
prometheus.site.quack-lab.dev vmagent.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy host.docker.internal:43261
}
handle {
respond "Njet Molotoff" 403
}
}
victoria.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy host.docker.internal:8428
}
handle {
respond "Njet Molotoff" 403
}
}
grafana.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy grafana-jococcw004848ck4k0owwww0:43433
}
handle {
respond "Njet Molotoff" 403
}
}

View File

@@ -0,0 +1,22 @@
nsq.site.quack-lab.dev nsq-http.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy nsqd:4151
}
handle {
respond "Njet Molotoff" 403
}
}
nsqadmin.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy nsqadmin:4171
}
handle {
respond "Njet Molotoff" 403
}
}

View File

@@ -0,0 +1,11 @@
pdf.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy stirling-pdf:8080
}
handle {
respond "Njet Molotoff" 403
}
}

View File

@@ -0,0 +1,11 @@
portainer.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy portainer:9000
}
handle {
respond "Njet Molotoff" 403
}
}

View File

@@ -0,0 +1,11 @@
torrent.site.quack-lab.dev {
@lan {
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy qbit:8080
}
handle {
respond "Njet Molotoff" 403
}
}

View File

@@ -1,13 +1,11 @@
webtop.site.quack-lab.dev {
@lan {
remote_ip 192.168.0.0/16 127.0.0.1
remote_ip 192.168.1.0/24 127.0.0.1
}
handle @lan {
reverse_proxy webtop:3000
}
handle {
respond "Forbidden" 403
respond "Njet Molotoff" 403
}
}