headscale config and caddy service

services/caddy/Caddyfile

@@ -0,0 +1,174 @@
+(forward_headers) {
+        header {
+                Permissions-Policy interest-cohort=()
+                Strict-Transport-Security "max-age=31536000; includeSubdomains"
+                X-XSS-Protection "1; mode=block"
+                X-Content-Type-Options "nosniff"
+                X-Robots-Tag noindex, nofollow
+                Referrer-Policy "same-origin"
+                Content-Security-Policy "frame-ancestors {$public_domain }} *.{$public_domain}"
+                -Server
+                Permissions-Policy "geolocation=(self {$public_domain }} *.{$public_domain}), microphone=()"
+        }
+}
+
+auth.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+audiobookshelf.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                        }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+gitea.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+headscale.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+
+immich.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+ldap.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+linkwarden.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+mealie.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+paperless.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+radicale.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+shlink.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+stirling-pdf.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+superset.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+vaultwarden.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                        }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+vikunja.{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}
+
+{$public_domain} {
+        reverse_proxy ${node_local_ip} {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+        tls {$email}
+        import forward_headers
+}