Caddyfile

{
	email {env.ACME_EMAIL}
	acme_ca https://acme-v02.api.letsencrypt.org/directory
	on_demand_tls {
		# https://caddyserver.com/on-demand-tls
		# https://caddyserver.com/docs/automatic-https#on-demand-tls
		# https://caddyserver.com/docs/json/apps/tls/automation/on_demand/permission/http/
		ask http://zippd-backend:8080/sites/permission
	}
}

:80 {
	redir https://{host}{uri} permanent
}

zippd.app:443 {
	reverse_proxy zippd-landing-page:3000
}

auth.zippd.app:443 {
	reverse_proxy fief-server:8000
}

api.zippd.app:443 {
	reverse_proxy zippd-backend:8080
}

dashboard.zippd.app:443 {
	reverse_proxy zippd-dashboard:3000
}

*.zippd.site:443 {
	tls {
		dns porkbun {
			api_key {env.PORKBUN_API_KEY}
			api_secret_key {env.PORKBUN_API_SECRET_KEY}
		}
		resolvers 1.1.1.1
	}
	reverse_proxy zippd-static-server:8080
}

https:// {
	tls {
		on_demand
	}
	reverse_proxy zippd-static-server:8080
}