import snippets.caddy
* {
	respond "Error" 500
}
https://photos.diukman.com {
	reverse_proxy http://192.168.2.100:3002
}
https://auth.diukman.com {
	reverse_proxy oauth2proxy:4180
}
https://adguard.diukman.com {
	import protect rp http://192.168.2.8
}
https://opnsense.diukman.com {
	import protect rp http://192.168.2.1
}
https://dns.diukman.com {
	import protect rp http://192.168.2.2:5380
}
https://proxmox.diukman.com {
	import protect rp_skip_tls https://192.168.2.10:8006
}
https://wireguard.diukman.com {
	import protect rp http://192.168.2.5
}
https://modem.diukman.com {
	import protect rp http://192.168.1.1
}

https://diukman.com {
	# import protected https://192.168.2.10:8006 "skip_verify"
	# import protected http://192.168.2.8 "skip_verify"
	# import protected "skip_tls" https://192.168.2.10:8006
	# handle /oauth2/* {
	# 	reverse_proxy oauth2proxy:4180 {
	# 		header_up X-Real-IP {remote_host}
	# 		header_up X-Forwarded-Uri {uri}
	# 	}
	# }
	# handle {
	# 	forward_auth oauth2proxy:4180 {
	# 		uri /oauth2/auth
	# 		copy_headers Remote-User Remote-Groups Remote-Name Remote-Email
	# 		header_up X-Real-IP {remote_host}
	# 		@error status 401 403
	# 		handle_response @error {
	# 			redir * /oauth2/sign_in?rd={scheme}://{host}{uri}
	# 		}
	# 	}
	# 	reverse_proxy http://192.168.2.8
	# }
}