caddy: finish migrating to caddy-docker-proxy

services/drone/drone.yml

@@ -6,6 +6,9 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.47
+    labels:
+      caddy: drone.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 80 }}"
     volumes:
       - ${DOCKER_STORAGE_PATH}/drone:/data
     env_file:

services/jellyfin.yml

@@ -10,6 +10,9 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.32
+    labels:
+      caddy: jellyfin.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 8096 }}"
     volumes:
       - "${DOCKER_STORAGE_PATH}/jellyfin:/config"
       - "${MEDIA_PATH}:/data/media"

services/komga.yml

@@ -3,11 +3,12 @@ services:
   komga:
     image: gotson/komga:latest
     container_name: komga
-    ports:
-      - "6080:25600"
     networks:
       public:
         ipv4_address: 192.168.240.34
+    labels:
+      caddy: comic.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 25600 }}"
     volumes:
       - "${DOCKER_STORAGE_PATH}/komga:/config"
       - "${COMIC_PATH}:/data"

services/miniflux.yml

@@ -3,11 +3,12 @@ services:
   miniflux:
     image: miniflux/miniflux:latest
     container_name: miniflux
-    ports:
-      - "8282:8080"
     networks:
       public:
         ipv4_address: 192.168.240.35
+    labels:
+      caddy: miniflux.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 8080 }}"
     environment:
       - BASE_URL=https://miniflux.${DOMAIN}
       - DATABASE_URL=postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@postgres/miniflux?sslmode=disable

services/netbootxyz.yml

@@ -6,6 +6,8 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.44
+    ports:
+      - 3000:3000
     volumes:
       - "${DOCKER_STORAGE_PATH}/netbootxyz:/config"
       - "${DOCKER_STORAGE_PATH_SLOW}/netbootxyz:/assets"

services/nextcloud.yml

@@ -15,4 +15,10 @@ services:
     environment:
       # caddy
       - TRUSTED_PROXIES=192.168.240.2
+    labels:
+      caddy: cloud.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 80 }}"
+      caddy.handle.redir_0: "/.well-known/carddav /remote.php/dav 301"
+      caddy.handle.redir_1: "/.well-known/caldav /remote.php/dav 301"
+      caddy.header.Strict-Transport-Security: "max-age=15552000; includeSubDomains"
     restart: unless-stopped

services/redlib.yml

@@ -21,6 +21,9 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.51
+    labels:
+      caddy: redlib.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 8080 }}"
     healthcheck:
       test: ["CMD", "wget", "--spider", "-q", "--tries=1", "http://localhost:8080/settings"]
       interval: 5m

services/registry.yml

@@ -6,6 +6,11 @@ services:
     networks:
       public:
         ipv4_address: 192.168.240.45
+    ports:
+      - 5000:5000
+    labels:
+      caddy: registry.${DOMAIN}
+      caddy.reverse_proxy: "{{ upstreams 5000 }}"
     volumes:
       - "${DOCKER_STORAGE_PATH}/registry/data:/var/lib/registry"
       - "${DOCKER_STORAGE_PATH}/registry/config.yml:/etc/docker/registry/config.yml"

services/sabnzbd.yml

@@ -18,4 +18,7 @@ services:
       - "${DOWNLOADS_PATH}/sabnzbd:/downloads"
       - "${DOWNLOADS_PATH}/sabnzbd-incomplete:/incomplete-downloads"
       - "${MEDIA_PATH}:/media"
+    labels:
+      caddy: sabnzbd.kucharczyk.xyz
+      caddy.reverse_proxy: "{{ upstreams 8080 }}"
     restart: unless-stopped

services/sonarr.yml

@@ -37,4 +37,4 @@ services:
       - "${NZB_DOWNLOADS_PATH}:/downloads"
       - "${TORRENTS_SEED_PATH}:/seed"
       - "${TORRENTS_SEED_PATH}/incomplete:/data/incomplete"
-    restart: unless-stopped
+    restart: unless-stopped