nixos-config/machines/heimdall/caddy/default.nix

{
  services.caddy = {
    virtualHosts = {
      "datarift.nl" = {
        extraConfig = ''
          @webfinger-erwin {
            path /.well-known/webfinger
            query resource=acct:erwin@datarift.nl
          }
          respond @webfinger-erwin 200 {
            body `{"subject":"acct:erwin@datarift.nl","links":[{"rel":"http://openid.net/specs/connect/1.0/issuer","href":"https://id.datarift.nl/realms/datarift"}]}`
            close
          }
        '';
      };
      "git.datarift.nl" = {
        extraConfig = ''
          reverse_proxy gitea.barn-beaver.ts.net:3000
        '';
      };

      "home.datarift.nl" = {
        extraConfig = ''
          reverse_proxy homeassistant.barn-beaver.ts.net:8123
        '';
      };

      "factorio.datarift.nl" = {
        extraConfig = ''
          root * /var/www/factorio.datarift.nl
          encode zstd gzip

          header /index.html Cache-Control nocache
          header /d-*/* Cache-Control "public, immutable, max-age=31536000"
          header *.js Cache-Control "public, immutable, max-age=31536000"
          header /thumbnail.png Cache-Control "public, max-age=604800"

          file_server
        '';
      };

      "boskma.frl" = {
        extraConfig = ''
          header /.well-known/matrix/* Content-Type application/json
          header /.well-known/matrix/* Access-Control-Allow-Origin *
          respond /.well-known/matrix/server `{"m.server":"matrix.boskma.frl:443"}`
          respond /.well-known/matrix/client `{"m.homeserver": {"base_url":"https://matrix.boskma.frl"},"m.identity_server":{"base_url":"https://vector.im"},"org.matrix.msc3575.proxy":{"url":"https://syncv3.boskma.frl"}}`
        '';
      };

      "matrix.boskma.frl" = {
        extraConfig = ''
          reverse_proxy neo.barn-beaver.ts.net:8008
        '';
      };

      "syncv3.boskma.frl" = {
        extraConfig = ''
          reverse_proxy neo.barn-beaver.ts.net:8009
        '';
      };
    };
  };
}