# Homelab Caddyfile — the single Caddy for both hosts.
#
# Caddy runs as a container on dankclaw (192.168.0.143, this repo's
# compose.yaml service 'caddy') and fronts every service on both hosts:
#   - dankclaw services: by container name (compose network) or by the
#     published LAN port (quadlet services on isolated networks)
#   - dankserver services (192.168.0.235): by published LAN port
#
# Naming: flat franksdank.cloud scheme (see docs/Infrastructure/LAN-DNS.md).
# DNS for these names is served by the dnsmasq quadlet on this host
# (dankclaw/dnsmasq/addn-hosts — every name resolves to 192.168.0.143)
# and handed to LAN clients by the SURFboard G36 router.
#
# The basicauth hash below is a placeholder. deploy.sh renders the real
# hash (CADDY_BASICAUTH_HASH from the host .env, git-ignored) into
# /home/dank/Containers/caddy/Caddyfile, which the container mounts.
#
# Phase 1 uses explicit http:// site addresses (no TLS yet). Phase 2 drops
# the prefix and adds a wildcard Let's Encrypt cert via DNS-01 (Porkbun).

{
	admin off
	email admin@franksdank.cloud
}

# --- Bare-IP access (health checks, convenience) ---
:80 {
	redir http://dankclaw.franksdank.cloud/ 302
}

# --- Homepage (password protected) ---
http://dankclaw.franksdank.cloud {
	basicauth {
		dank $2a$14$REPLACE_WITH_HASH
	}
	root * /srv/homepage
	file_server
}

# --- Legacy name: the media host has no Caddy of its own anymore ---
http://dankserver.franksdank.cloud {
	redir http://dankclaw.franksdank.cloud/ 302
}

# ═══════════════════════════════════════════════════════════════
# Services on this host (dankclaw, 192.168.0.143)
# ═══════════════════════════════════════════════════════════════

# --- SearXNG (quadlet; behind the Gluetun tunnel, published 8081) ---
http://search.franksdank.cloud {
	basicauth {
		dank $2a$14$REPLACE_WITH_HASH
	}
	reverse_proxy 192.168.0.143:8081
}

# --- ComfyUI ---
http://comfyui.franksdank.cloud {
	reverse_proxy comfyui:8188
}

# --- OpenWebUI (quadlet on slirp4netns; published 3005) ---
http://chat.franksdank.cloud {
	basicauth {
		dank $2a$14$REPLACE_WITH_HASH
	}
	reverse_proxy 192.168.0.143:3005
}

# --- Hermes ---
http://hermes.franksdank.cloud {
	basicauth {
		dank $2a$14$REPLACE_WITH_HASH
	}
	reverse_proxy hermes:8090
}

# --- Gitea (quadlet; published 3000) ---
http://gitea.franksdank.cloud {
	reverse_proxy 192.168.0.143:3000
}

# --- Grafana ---
http://grafana.franksdank.cloud {
	basicauth {
		dank $2a$14$REPLACE_WITH_HASH
	}
	reverse_proxy grafana:3000
}

# --- Prometheus ---
http://prometheus.franksdank.cloud {
	basicauth {
		dank $2a$14$REPLACE_WITH_HASH
	}
	reverse_proxy prometheus:9090
}

# --- Loki ---
http://loki.franksdank.cloud {
	reverse_proxy loki:3100
}

# ═══════════════════════════════════════════════════════════════
# Services on dankserver (192.168.0.235) — published LAN ports
# ═══════════════════════════════════════════════════════════════

# --- Plex (existing, kept) ---
http://plex.franksdank.casa {
	reverse_proxy 192.168.0.235:32400
}

http://plex.franksdank.cloud {
	reverse_proxy 192.168.0.235:32400
}

# --- Calibre-Web ---
http://books.franksdank.cloud {
	reverse_proxy 192.168.0.235:8083
}

# --- RomM ---
http://romm.franksdank.cloud {
	basicauth {
		dank $2a$14$REPLACE_WITH_HASH
	}
	reverse_proxy 192.168.0.235:8085
}

# --- Copyparty ---
http://files.franksdank.cloud {
	basicauth {
		dank $2a$14$REPLACE_WITH_HASH
	}
	reverse_proxy 192.168.0.235:3923
}

# --- Jellyfin ---
http://jellyfin.franksdank.cloud {
	reverse_proxy 192.168.0.235:8096

	transport http {
		versions h2c 1.1
	}
}

# --- *arr Stack ---
http://radarr.franksdank.cloud {
	reverse_proxy 192.168.0.235:7878
}

http://sonarr.franksdank.cloud {
	reverse_proxy 192.168.0.235:8989
}

http://lidarr.franksdank.cloud {
	reverse_proxy 192.168.0.235:8686
}

http://readarr.franksdank.cloud {
	reverse_proxy 192.168.0.235:8787
}

http://prowlarr.franksdank.cloud {
	reverse_proxy 192.168.0.235:9696
}

http://qbittorrent.franksdank.cloud {
	reverse_proxy 192.168.0.235:8080
}

# --- Optional: Jackett ---
# http://jackett.franksdank.cloud {
# 	reverse_proxy 192.168.0.235:9117
# }

# --- Optional: Whisparr ---
# http://whisparr.franksdank.cloud {
# 	reverse_proxy 192.168.0.235:6969
# }