import /etc/caddy/shared/*

media.hubris.network {
	tls {
		dns ionos {env.IONOS_AUTH_API_TOKEN}
	}
	# SSO plugin handles auth via OIDC redirect to Authentik.
	# No forward-auth gate — Jellyfin login page shows SSO button directly.
	reverse_proxy 192.168.8.246:8096
}

books.hubris.network {
	tls {
		dns ionos {env.IONOS_AUTH_API_TOKEN}
	}
	reverse_proxy 192.168.8.247:6060
}

roms.hubris.network {
	tls {
		dns ionos {env.IONOS_AUTH_API_TOKEN}
	}
	reverse_proxy 192.168.8.249:80
}

jellyseerr.hubris.network {
	tls {
		dns ionos {env.IONOS_AUTH_API_TOKEN}
	}
	reverse_proxy 192.168.8.245:5056
}

qbit.hubris.network {
	tls {
		dns ionos {env.IONOS_AUTH_API_TOKEN}
	}
	@api path /api/*
	handle @api {
		reverse_proxy 192.168.8.245:8080
	}
	handle {
		import authentik
		reverse_proxy 192.168.8.245:8080
	}
}

sab.hubris.network {
	tls {
		dns ionos {env.IONOS_AUTH_API_TOKEN}
	}
	handle {
		import authentik
		reverse_proxy 192.168.8.245:8082
	}
}

matrix.hubris.network {
	tls {
		dns ionos {env.IONOS_AUTH_API_TOKEN}
	}
	reverse_proxy 192.168.8.242:8008
}

element.hubris.network {
	tls {
		dns ionos {env.IONOS_AUTH_API_TOKEN}
	}
	reverse_proxy 192.168.8.242:8080
}

house.hubris.network {
tls {
dns ionos {env.IONOS_AUTH_API_TOKEN}
}
reverse_proxy 192.168.8.244:3000
}

seanime.hubris.network {
	tls {
		dns ionos {env.IONOS_AUTH_API_TOKEN}
	}
	reverse_proxy 192.168.8.248:43211
}