{
  email neale@woozle.org

  # Uncomment to use testing CA
  #acme_ca https://acme-staging-v02.api.letsencrypt.org/directory
}

import /run/secrets/caddy-users

(restricted-access) {
  basicauth {
    import home-users
  }
}

git.woozle.org {
  reverse_proxy gitea:3000
}

drive.woozle.org {
  import restricted-access

  # XXX: browsing says method not allowed
  @get {
    method GET
  }
  # route overrides built-in ordering
  route {
    file_server @get browse {
      root /srv/ext/
    }
    reverse_proxy webdav:8000
  }
}

# XXX: have this use caddy auth
ancestry.woozle.org {
  reverse_proxy geneweb:2317
}

sweetums.woozle.org {
  handle /transmission/* {
    import restricted-access
    reverse_proxy host.docker.internal:9091
  }
  handle_path /sucker/* {
    import restricted-access
    reverse_proxy host.docker.internal:5880
  }

  file_server /public/* {
    root /srv/ext/storage/public
  }

  import restricted-access
  file_server {
    root /www
  }
}