caddy: finish migrating to caddy-docker-proxy

docker-compose.yml

@@ -1,4 +1,13 @@
 ---
+configs:
+  caddyfile:
+    content: |
+      notes-old.kucharczyk.xyz {
+        handle {
+          root * /srv/notes
+          file_server
+        }
+      }
 
 include:
   - services/bazarr.yml
@@ -33,9 +42,12 @@ services:
       - "${DENDRON_NOTES_EXTERNAL_PORT}:${DENDRON_NOTES_INTERNAL_PORT}"
       - 80:80
       - 443:443
-    user: ${PUID}
     environment:
-      - CADDY_INGRESS_NETWORKS=public
+      - CADDY_INGRESS_NETWORKS=docker-compose-templates_public
+      - CADDY_DOCKER_CADDYFILE_PATH=/Caddyfile
+    configs:
+      - source: caddyfile
+        target: /Caddyfile
     volumes:
       - "${DOCKER_STORAGE_PATH}/caddy/etc:/etc/caddy"
       - "${DOCKER_STORAGE_PATH}/caddy/data:/data"
@@ -69,6 +81,15 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.3
+    labels:
+      caddy: tracker.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 8001 }}"
+      caddy.handle_path: "/static/*"
+      caddy.handle_path.root: "* /srv/timetracker"
+      caddy.handle_path.file_server:
+      caddy.handle: /robots.txt
+      caddy.handle.root: "* /srv/timetracker"
+      caddy.handle.file_server:
     restart: unless-stopped
 
   trilium:
@@ -101,6 +122,16 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.5
+    labels:
+      caddy: "notify.${DOMAIN} http://notify.${DOMAIN}"
+      caddy.reverse_proxy: "{{ upstreams $NTFY_INTERNAL_PORT }}"
+      caddy.reverse_proxy.header_up_0: "{http.request.header.Upgrade}"
+      caddy.reverse_proxy.header_up_1: "Connection \"upgrade\""
+      caddy.redir: "https://{host}{uri}"
+      caddy.redir.protocol: http
+      caddy.redir.method: get
+      caddy.redir.path_regexp: "^/([-_a-z0-9]{0,64}$|docs/|static/)"
+
     restart: unless-stopped
 
   audiobookshelf:
@@ -154,6 +185,9 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.8
+    labels:
+      caddy: recipes.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 9000 }}"
     restart: unless-stopped
 
   rtorrent:
@@ -177,6 +211,9 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.9
+    labels:
+      caddy: torrent.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 9080 }}"
     restart: unless-stopped
 
   webhook:
@@ -267,6 +304,9 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.14
+    labels:
+      caddy: music.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams $NAVIDROME_INTERNAL_PORT }}"
     restart: unless-stopped
 
   maloja:
@@ -296,7 +336,7 @@ services:
 
   paperless-ngx:
     container_name: paperless-ngx
-    image: ghcr.io/paperless-ngx/paperless-ngx:latest
+    image: ghcr.io/paperless-ngx/paperless-ngx:2.0.1
     restart: unless-stopped
     depends_on:
       - redis
@@ -395,6 +435,9 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.21
+    labels:
+      caddy: wiki.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams $MEDIAWIKI_INTERNAL_PORT }}"
     depends_on:
       - mariadb
     ports:
@@ -413,6 +456,9 @@ services:
         ipv4_address: 192.168.240.22
     ports:
       - "${PHOTOPRISM_EXTERNAL_PORT}:${PHOTOPRISM_INTERNAL_PORT}"
+    labels:
+      caddy: photos.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 2342 }}"
     depends_on:
       - mariadb
     env_file:
@@ -442,6 +488,9 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.24
+    labels:
+      caddy: baserow.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 80 }}"
     depends_on:
       - postgres
     env_file:
@@ -452,7 +501,7 @@ services:
 
   gitea:
     container_name: gitea
-    image: gitea/gitea:1.21.11
+    image: gitea/gitea:1.23.4
     networks:
       public:
         ipv4_address: 192.168.240.26
@@ -461,6 +510,9 @@ services:
     ports:
       - "${GITEA_WEBUI_EXTERNAL_PORT}:${GITEA_WEBUI_INTERNAL_PORT}"
       - "${GITEA_SSH_EXTERNAL_PORT}:${GITEA_SSH_INTERNAL_PORT}"
+    labels:
+      caddy: git.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams $GITEA_WEBUI_INTERNAL_PORT }}"
     volumes:
       - "${DOCKER_STORAGE_PATH}/gitea:/data"
     restart: unless-stopped
@@ -494,6 +546,9 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.28
+    labels:
+      caddy: bookmarks.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 80 }}"
     depends_on:
       - mariadb
       - redis
@@ -536,6 +591,9 @@ services:
         ipv4_address: 192.168.240.29
     ports:
       - "${VAULTWARDEN_EXTERNAL_PORT}:${VAULTWARDEN_INTERNAL_PORT}"
+    labels:
+      caddy: bw.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 80 }}"
     env_file:
       - ./secrets/vaultwarden.env
     environment: