LinkAce Running, but Unable to Check for Updates or Generate a Cron Token

[Lanie-Carmelo]

Hi. I posted earlier about issues with LinkAce in Docker behind Caddy and Authelia. Most of my issues are resolved, but I'm seeing "Could not check for updates at the bottom of each page, and when I tried to generate a cron token, nothing happened except for the generate button graying out. I am seeing one or two 404 errors in my logs, but I don't know if that's causing the problem or not.

Logs

2025-02-22 23:25:26,460 INFO supervisord started with pid 1
2025-02-22 23:25:27,465 INFO spawned: 'php-fpm' with pid 8
2025-02-22 23:25:27,467 INFO spawned: 'caddy' with pid 9
[22-Feb-2025 23:25:27] NOTICE: [pool www] 'user' directive is ignored when FPM is not running as root
[22-Feb-2025 23:25:27] NOTICE: [pool www] 'group' directive is ignored when FPM is not running as root
[22-Feb-2025 23:25:27] NOTICE: fpm is running, pid 8
[22-Feb-2025 23:25:27] NOTICE: ready to handle connections
{"level":"info","ts":1740266727.5264525,"msg":"using config from file","file":"/etc/caddy/Caddyfile"}
{"level":"info","ts":1740266727.5280282,"msg":"adapted config to JSON","adapter":"caddyfile"}
{"level":"warn","ts":1740266727.5280406,"msg":"Caddyfile input is not formatted; run 'caddy fmt --overwrite' to fix inconsistencies","adapter":"caddyfile","file":"/etc/caddy/Caddyfile","line":2}
{"level":"info","ts":1740266727.529092,"logger":"admin","msg":"admin endpoint started","address":"localhost:2019","enforce_origin":false,"origins":["//localhost:2019","//[::1]:2019","//127.0.0.1:2019"]}
{"level":"warn","ts":1740266727.529331,"logger":"http.auto_https","msg":"server is listening only on the HTTP port, so no automatic HTTPS will be applied to this server","server_name":"srv0","http_port":80}
{"level":"info","ts":1740266727.5294206,"logger":"tls.cache.maintenance","msg":"started background certificate maintenance","cache":"0x40000bab00"}
{"level":"warn","ts":1740266727.530186,"logger":"http","msg":"HTTP/2 skipped because it requires TLS","network":"tcp","addr":":80"}
{"level":"warn","ts":1740266727.530195,"logger":"http","msg":"HTTP/3 skipped because it requires TLS","network":"tcp","addr":":80"}
{"level":"info","ts":1740266727.530198,"logger":"http.log","msg":"server running","name":"srv0","protocols":["h1","h2","h3"]}
{"level":"info","ts":1740266727.5412574,"msg":"autosaved config (load with --resume flag)","file":"/home/www-data/.config/caddy/autosave.json"}
{"level":"info","ts":1740266727.541271,"msg":"serving initial configuration"}
{"level":"info","ts":1740266727.5477707,"logger":"tls","msg":"cleaning storage unit","storage":"FileStorage:/home/www-data/.local/share/caddy"}
{"level":"info","ts":1740266727.5541356,"logger":"tls","msg":"finished cleaning storage units"}
2025-02-22 23:25:28,555 INFO success: php-fpm entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
2025-02-22 23:25:28,555 INFO success: caddy entered RUNNING state, process has stayed up for > than 1 seconds (startsecs)
::1 -  22/Feb/2025:23:25:34 +0000 "GET /index.php" 200
::1 -  22/Feb/2025:23:25:34 +0000 "GET /index.php" 404

Docker Compose file

services:
  # --- LinkAce
  linkace:
    image: docker.io/linkace/linkace:latest
    container_name: linkace
    restart: unless-stopped
    depends_on:
      - linkace_db
    ports:
      - "0.0.0.0:3009:80"
    volumes:
      - ./.env:/app/.env
      - ./backups:/app/storage/app/backups

  # --- Database
  linkace_db:
    image: docker.io/library/mariadb:11.5
    container_name: linkace_db
    restart: unless-stopped
    command: mariadbd --character-set-server=utf8mb4 --collation-server=utf8mb4_bin
    environment:
      - MYSQL_ROOT_PASSWORD=${DB_PASSWORD}
      - MYSQL_USER=${DB_USERNAME}
      - MYSQL_PASSWORD=${DB_PASSWORD}
      - MYSQL_DATABASE=${DB_DATABASE}
    volumes:
      - db:/var/lib/mysql

  # --- Cache
  linkace_redis:
    image: docker.io/bitnami/redis:7.4
    container_name: linkace_redis
    restart: unless-stopped
    environment:
      - REDIS_PASSWORD=${REDIS_PASSWORD}

volumes:
  db:

.env (secrets redacted)

## LINKACE CONFIGURATION

# The app key is generated later, please leave it like that
APP_KEY=redacted
APP_ENV=development

## Configuration of the database connection
## Attention: Those settings are configured during the web setup, please do not modify them now.
# Set the database driver (mysql, pgsql, sqlsrv, sqlite)
DB_CONNECTION=mysql
# Set the host of your database here
DB_HOST=linkace_db
# Set the port of your database here
DB_PORT=3306
# Set the database name here
DB_DATABASE=linkace
# Set both username and password of the user accessing the database
DB_USERNAME=linkace
# Wrap your password into quotes (") if it contains special characters
DB_PASSWORD=redacted

## Redis cache configuration
# Set the Redis connection here if you want to use it
REDIS_HOST=linkace_redis
REDIS_PASSWORD=redacted
REDIS_PORT=6379
APP_DEBUG=true

# SSO configuration
SSO_ENABLED=true
SSO_OIDC_ENABLED=true
SSO_REGISTRATION_ENABLED=true
REGULAR_LOGIN_DISABLED=true
SSO_OIDC_BASE_URL=https://auth.laniecarmelo.tech/  # Your Authelia base URL
SSO_OIDC_CLIENT_ID=linkace
SSO_OIDC_CLIENT_SECRET='redacted'
SSO_OIDC_SCOPES=openid,profile,email

Caddyfile snippet

{
	email [email protected]
	debug
	acme_dns cloudflare redacted
	http_port 80
	https_port 443
	admin :2019 {
		origins 127.0.0.1:2019 0.0.0.0:2019 stormux:2019 caddy.laniecarmelo.tech
	}
}

(logconfig) {
	log {
		output stdout
		format json
	}
}

(auth_headers) {
	header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
}

(proxy_config) {
	header_up Host {http.request.host}
	header_up X-Real-IP {http.request.remote}
	header_up X-Forwarded-User {http.auth.user.id} # Pass user ID
	header_up X-Forwarded-Email {http.auth.user.email} # Pass email
}

(authelia_middleware) {
	forward_auth localhost:9091 {
		uri /api/verify?rd=https://auth.laniecarmelo.tech
		copy_headers Remote-User Remote-Email Remote-Groups Authorization
	}
}

bookmarks.laniecarmelo.tech {
    route {
        import authelia_middleware
        reverse_proxy localhost:3009 {  # Directly proxy to LinkAce's web server
            import proxy_config
        }
    }
    import logconfig
    import auth_headers
}

Authelia config snippet

    - domain: "*.laniecarmelo.tech"
      policy: bypass
      networks:
        - 192.168.1.0/24    # Local network
        - 172.17.0.0/16     # Docker bridge network
        - 100.64.0.0/10     # Tailscale network

    - domain: "bookmarks.laniecarmelo.tech"
      resources: ["^/api.*"]
      policy: bypass

    - domain: "*.laniecarmelo.tech"
      policy: one_factor      

      - client_id: linkace
        client_name: LinkAce bookmarking app
        client_secret: redacted
        public: false
        authorization_policy: one_factor
        scopes: [openid, groups, profile, email, offline_access]
        redirect_uris:
          - https://bookmarks.laniecarmelo.tech/auth/oidc/callback
        grant_types: [authorization_code]
        response_types: [code]
        response_modes: [form_post, query]
        userinfo_signed_response_alg: none
        consent_mode: explicit
        pre_configured_consent_duration: "1y"

Does anyone know what might be causing this and how I can fix it?

[BrookeDot]

Do you know if your container can reach lhttps://updates.linkace.org/api/current-version? The update logic is here:
https://github.com/Kovah/LinkAce/blob/v2.1.4/app/Helper/UpdateHelper.php#L13

It checks that endpoint against a cached version of the installed version from package.json so perhaps make sure that location can be read.

Overall it sounds like a permissions/disk write problem. Sorry I'm not familiar with your specific stack.

[Lanie-Carmelo]

This is what I'm seeing with logs from both LinkAce and Caddy and checking ownership of files. I also tried using curl and it seems to have worked, but LinkAce says unable to check for updates.

Logs and command output

[lanie@stormux ~] $ docker exec -it linkace sh
/app $ ls -la
total 644
drwxr-xr-x    1 root     root          4096 Feb 26 08:29 .
drwxr-xr-x    1 root     root          4096 Feb 26 21:38 ..
-rw-r--r--    1 www-data www-data       789 Feb 26 08:23 .env
-rw-r--r--    1 www-data www-data     35149 Feb 26 08:23 LICENSE.md
-rw-r--r--    1 www-data www-data      6317 Feb 26 08:23 README.md
drwxr-xr-x   21 www-data www-data      4096 Feb 26 08:23 app
-rwxr-xr-x    1 www-data www-data      1686 Feb 26 08:23 artisan
drwxr-xr-x    1 www-data www-data      4096 Feb 26 08:23 bootstrap
-rw-r--r--    1 www-data www-data      3264 Feb 26 08:23 composer.json
-rw-r--r--    1 www-data www-data    539559 Feb 26 08:23 composer.lock
drwxr-xr-x    2 www-data www-data      4096 Feb 26 08:23 config
drwxr-xr-x    1 www-data www-data      4096 Feb 26 08:29 database
drwxr-xr-x    1 www-data www-data      4096 Feb 26 08:23 lang
-rw-r--r--    1 www-data www-data       946 Feb 26 08:23 package.json
drwxr-xr-x    1 www-data www-data      4096 Feb 26 08:29 public
drwxr-xr-x    5 www-data www-data      4096 Feb 26 08:23 resources
drwxr-xr-x    2 www-data www-data      4096 Feb 26 08:23 routes
drwxr-xr-x    1 www-data www-data      4096 Feb 26 08:23 storage
drwxr-xr-x   50 www-data www-data      4096 Feb 26 08:25 vendor
/app $ curl https://updates.linkace.org/api/current-version
/app $ exit
[lanie@stormux ~] $ ls
.                        .bash_functions          .bash_logout   .cargo        compose.yaml  .docker          .dotnet               .gitconfig     go                  .inputrc          .local     .npm         .pre-commit-config.yaml  Public           .rest-client      Templates  .vscode                    .xinitrc
..                       .bash_history            .bash_profile  Checking      .config       docker           Downloads             .git-template  homepage.log        install-agent.sh  .minikube  .npm-global  programming_projects     .python_history  .restic_password  .venv      .vscode-remote-containers  .xprofile
allow_cloudflare_ips.sh  .bash_history-58887.tmp  .bashrc        .cloudflared  Current       dockerproxy.log  error                 .gnupg         idriveforlinux.bin  install-hub.sh    .mozilla   .npmrc       project                  rank-mirrors.sh  .screenrc         Videos     .vscode-server             .xsession-errors
.bash_aliases            .bash_history-61933.tmp  .cache         .codeium      Desktop       Documents        formatted-caddy.json  .gnupg.bak     .influxdbv2         .kube             Music      Pictures     .psql_history            .redhat          .ssh              .vnc       .wget-hsts                 .yarn
[lanie@stormux ~] $ ls -la
total 107424
drwxr-xr-x 40 lanie users       4096 Feb 26 16:18 .
drwxr-xr-x  4 root  root        4096 Feb  1 11:42 ..
-rwxr-xr-x  1 lanie users        933 Jan 29 01:04 allow_cloudflare_ips.sh
-rw-r--r--  1 lanie root        2966 Jan 12 04:21 .bash_aliases
-rw-r--r--  1 root  root         600 Jan  3 20:18 .bash_functions
-rw-------  1 lanie users      16436 Feb 26 16:18 .bash_history
-rw-------  1 lanie users          0 Jan 23 04:00 .bash_history-58887.tmp
-rw-------  1 lanie users          0 Feb 12 05:14 .bash_history-61933.tmp
-rw-r--r--  1 lanie users         21 Feb  5  2023 .bash_logout
-rw-r--r--  1 lanie users         57 Feb  5  2023 .bash_profile
-rw-r--r--  1 lanie users       1026 Feb 10 14:19 .bashrc
drwxr-xr-x 26 lanie users       4096 Feb 20 23:11 .cache
drwxr-xr-x  3 lanie users       4096 Jan 12 03:04 .cargo
-rw-r--r--  1 lanie users          0 Feb  9 11:45 Checking
drwx------  2 lanie users       4096 Jan 28 00:58 .cloudflared
drwxr-xr-x 12 lanie users       4096 Feb  8 01:46 .codeium
-rw-r--r--  1 lanie users        593 Feb 25 15:04 compose.yaml
drwx------ 28 lanie users       4096 Feb 15 05:39 .config
-rw-r--r--  1 lanie users          0 Feb  9 11:45 Current
drwxr-xr-x  2 lanie users       4096 Jan  3 20:11 Desktop
drwx------  3 lanie docker      4096 Feb  6 03:33 .docker
drwx--x--x  9 lanie users       4096 Jan 13 23:13 docker
-rw-r--r--  1 lanie users       3015 Jan 23 21:43 dockerproxy.log
drwxr-xr-x  2 lanie users       4096 Feb 22 23:47 Documents
drwxr-xr-x  3 lanie users       4096 Jan  7 09:44 .dotnet
drwxr-xr-x  2 lanie users       4096 Jan  3 20:11 Downloads
-rw-r--r--  1 lanie users          0 Feb  9 11:45 error
-rw-r--r--  1 lanie users      86838 Feb 26 10:54 formatted-caddy.json
-rw-r--r--  1 lanie users        163 Feb 17 12:10 .gitconfig
drwxr-xr-x  3 lanie users       4096 Feb 15 04:30 .git-template
drwx------  4 lanie users       4096 Feb 10 15:37 .gnupg
drwx------  4 lanie users       4096 Jan 17 06:45 .gnupg.bak
drwxr-xr-x  4 lanie users       4096 Feb  1 10:51 go
-rw-r--r--  1 lanie users      47254 Jan 23 21:40 homepage.log
-rwxr-xr-x  1 lanie users  109573539 Oct 25 01:02 idriveforlinux.bin
drwxr-xr-x  2 lanie users       4096 Feb  1 02:09 .influxdbv2
-rw-r--r--  1 root  root         195 Jan  3 20:18 .inputrc
-rwxr-xr-x  1 lanie users      15320 Feb  9 16:05 install-agent.sh
-rwxr-xr-x  1 lanie users       4403 Feb  9 13:28 install-hub.sh
drwxr-x---  3 lanie users       4096 Jan 31 14:57 .kube
drwx------  5 lanie users       4096 Jan  7 07:48 .local
drwxr-xr-x  9 lanie users       4096 Jan 31 14:57 .minikube
drwx------  4 lanie users       4096 Feb  1 08:47 .mozilla
drwxr-xr-x  2 lanie users       4096 Jan  3 20:11 Music
drwxr-xr-x  5 lanie users       4096 Feb  1 08:08 .npm
drwxr-xr-x  4 lanie users       4096 Feb 15 05:12 .npm-global
-rw-------  1 lanie users         21 Feb 15 05:11 .npmrc
drwxr-xr-x  2 lanie users       4096 Jan  3 20:11 Pictures
-rw-r--r--  1 lanie users       1487 Feb 15 05:28 .pre-commit-config.yaml
drwxr-xr-x  3 lanie users       4096 Feb 15 03:59 programming_projects
drwxr-xr-x  2 root  root        4096 Jan  7 02:34 project
-rw-------  1 lanie users          0 Feb  8 02:44 .psql_history
drwxr-xr-x  2 lanie users       4096 Jan  3 20:11 Public
-rw-r--r--  1 lanie users        219 Feb 15 05:24 .python_history
-rwxr-xr-x  1 root  root         533 Jan  6 16:40 rank-mirrors.sh
drwxr-xr-x  2 lanie users       4096 Jan 30 16:01 .redhat
drwxr-xr-x  3 lanie users       4096 Feb  3 12:10 .rest-client
-rw-------  1 lanie users         15 Jan  7 03:40 .restic_password
-rw-r--r--  1 root  root         403 Jan  3 20:18 .screenrc
drwx------  2 lanie users       4096 Feb 17 11:43 .ssh
drwxr-xr-x  2 lanie users       4096 Jan  3 20:11 Templates
drwxr-xr-x  3 lanie users       4096 Jan  9 09:25 .venv
drwxr-xr-x  2 lanie users       4096 Jan  3 20:11 Videos
drwx------  2 lanie users       4096 Feb  2 18:13 .vnc
drwxr-xr-x  2 lanie users       4096 Jan 22 21:08 .vscode
drwxr-xr-x  4 lanie users       4096 Feb 22 22:32 .vscode-remote-containers
drwxr-x---  5 lanie users       4096 Feb 26 16:25 .vscode-server
-rw-r--r--  1 lanie users        309 Feb 22 04:30 .wget-hsts
-rwxr-xr-x  1 lanie users        434 Feb 13 16:51 .xinitrc
-rw-r--r--  1 lanie users        272 Feb 13 16:51 .xprofile
-rw-------  1 lanie users          0 Jan  6 15:04 .xsession-errors
drwxr-xr-x  3 lanie users       4096 Jan  9 18:58 .yarn
[lanie@stormux ~] $ docker logs linkace
[lanie@stormux ~] $ docker logs linkace
::1 -  26/Feb/2025:22:27:53 +0000 "GET /index.php" 302
::1 -  26/Feb/2025:22:27:54 +0000 "GET /index.php" 200
::1 -  26/Feb/2025:22:27:55 +0000 "GET /index.php" 404
[lanie@stormux ~] $ sudo journalctl -u caddy --no-pager | grep bookmarks
Feb 26 16:27:53 stormux caddy[1041313]: {"level":"debug","ts":1740608873.3898365,"logger":"events","msg":"event","name":"tls_get_certificate","id":"59cffeaa-1612-4a93-a3e2-be33e319e5a3","origin":"tls","data":{"client_hello":{"CipherSuites":[10794,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"ServerName":"bookmarks.laniecarmelo.tech","SupportedCurves":[39578,4588,29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[64250,772,771],"RemoteAddr":{"IP":"69.58.156.77","Port":56821,"Zone":""},"LocalAddr":{"IP":"192.168.1.137","Port":443,"Zone":""}}}}
Feb 26 16:27:53 stormux caddy[1041313]: {"level":"debug","ts":1740608873.3899612,"logger":"tls.handshake","msg":"choosing certificate","identifier":"bookmarks.laniecarmelo.tech","num_choices":1}
Feb 26 16:27:53 stormux caddy[1041313]: {"level":"debug","ts":1740608873.3899817,"logger":"tls.handshake","msg":"default certificate selection results","identifier":"bookmarks.laniecarmelo.tech","subjects":["bookmarks.laniecarmelo.tech"],"managed":true,"issuer_key":"acme-v02.api.letsencrypt.org-directory","hash":"be80f0a7b4251e70bb9bdef3f9811fa3e9d7fd6b251bef1c99210401f9215350"}
Feb 26 16:27:53 stormux caddy[1041313]: {"level":"debug","ts":1740608873.389994,"logger":"tls.handshake","msg":"matched certificate in cache","remote_ip":"69.58.156.77","remote_port":"56821","subjects":["bookmarks.laniecarmelo.tech"],"managed":true,"expiration":1748213719,"hash":"be80f0a7b4251e70bb9bdef3f9811fa3e9d7fd6b251bef1c99210401f9215350"}
Feb 26 16:27:54 stormux caddy[1041313]: {"level":"debug","ts":1740608874.3835595,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"127.0.0.1:3009","duration":0.982970397,"request":{"remote_ip":"69.58.156.77","remote_port":"56821","client_ip":"69.58.156.77","proto":"HTTP/1.1","method":"GET","host":"bookmarks.laniecarmelo.tech","uri":"/","headers":{"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-User":["?1"],"Accept-Encoding":["gzip, deflate, br, zstd"],"X-Forwarded-Port":["443"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Sec-Fetch-Mode":["navigate"],"X-Forwarded-Host":["bookmarks.laniecarmelo.tech"],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-Dest":["document"],"Front-End-Https":["On"],"X-Forwarded-For":["69.58.156.77:56821"],"Sec-Ch-Ua":["\"Microsoft Edge\";v=\"135\", \"Not-A.Brand\";v=\"8\", \"Chromium\";v=\"135\""],"Dnt":["1"],"Sec-Ch-Ua-Mobile":["?0"],"Cookie":["REDACTED"],"Sec-Fetch-Site":["none"],"X-Forwarded-Proto":["https"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0"],"Upgrade-Insecure-Requests":["1"],"X-Real-Ip":["69.58.156.77:56821"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"bookmarks.laniecarmelo.tech"}},"headers":{"Cache-Control":["no-cache, private"],"Content-Type":["text/html; charset=utf-8"],"Set-Cookie":["REDACTED"],"Date":["Wed, 26 Feb 2025 22:27:54 GMT"],"Location":["http://bookmarks.laniecarmelo.tech:443/dashboard"],"Server":["Caddy"],"Status":["302 Found"],"Content-Length":["438"]},"status":302}
Feb 26 16:27:54 stormux caddy[1041313]: {"level":"info","ts":1740608874.388925,"logger":"http.log.access.log6","msg":"handled request","request":{"remote_ip":"69.58.156.77","remote_port":"56821","client_ip":"69.58.156.77","proto":"HTTP/1.1","method":"GET","host":"bookmarks.laniecarmelo.tech","uri":"/","headers":{"Sec-Ch-Ua":["\"Microsoft Edge\";v=\"135\", \"Not-A.Brand\";v=\"8\", \"Chromium\";v=\"135\""],"Sec-Fetch-User":["?1"],"Cookie":["REDACTED"],"Sec-Fetch-Site":["none"],"Accept-Language":["en-US,en;q=0.9"],"Upgrade-Insecure-Requests":["1"],"Connection":["keep-alive"],"Sec-Fetch-Mode":["navigate"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Dnt":["1"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0"],"Sec-Ch-Ua-Platform":["\"Windows\""]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"bookmarks.laniecarmelo.tech"}},"bytes_read":0,"user_id":"","duration":0.988461819,"size":438,"status":302,"resp_headers":{"Status":["302 Found"],"Content-Security-Policy":["default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"],"X-Content-Type-Options":["nosniff"],"X-Xss-Protection":["1; mode=block"],"Server":["Caddy","Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Cache-Control":["no-cache, private"],"Content-Length":["438"],"Set-Cookie":["REDACTED"],"Date":["Wed, 26 Feb 2025 22:27:54 GMT"],"Location":["http://bookmarks.laniecarmelo.tech:443/dashboard"],"Referrer-Policy":["strict-origin-when-cross-origin"],"Strict-Transport-Security":["max-age=31536000; includeSubDomains; preload"],"Content-Type":["text/html; charset=utf-8"]}}
Feb 26 16:27:54 stormux caddy[1041313]: {"level":"debug","ts":1740608874.7123516,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"127.0.0.1:3009","duration":0.306723991,"request":{"remote_ip":"69.58.156.77","remote_port":"56821","client_ip":"69.58.156.77","proto":"HTTP/1.1","method":"GET","host":"bookmarks.laniecarmelo.tech","uri":"/dashboard","headers":{"X-Forwarded-Proto":["https"],"X-Forwarded-Port":["443"],"X-Real-Ip":["69.58.156.77:56821"],"X-Forwarded-Host":["bookmarks.laniecarmelo.tech"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Ch-Ua":["\"Microsoft Edge\";v=\"135\", \"Not-A.Brand\";v=\"8\", \"Chromium\";v=\"135\""],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Cookie":["REDACTED"],"Sec-Fetch-Mode":["navigate"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua-Mobile":["?0"],"Accept-Encoding":["gzip, deflate, br, zstd"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0"],"Sec-Fetch-Site":["none"],"Front-End-Https":["On"],"Sec-Fetch-User":["?1"],"Upgrade-Insecure-Requests":["1"],"X-Forwarded-For":["69.58.156.77:56821"],"Accept-Language":["en-US,en;q=0.9"],"Dnt":["1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"bookmarks.laniecarmelo.tech"}},"headers":{"Cache-Control":["no-cache, private"],"Content-Encoding":["zstd"],"Content-Type":["text/html; charset=UTF-8"],"Date":["Wed, 26 Feb 2025 22:27:54 GMT"],"Server":["Caddy"],"Set-Cookie":["REDACTED"],"Vary":["Accept-Encoding"]},"status":200}
Feb 26 16:27:54 stormux caddy[1041313]: {"level":"info","ts":1740608874.7133482,"logger":"http.log.access.log6","msg":"handled request","request":{"remote_ip":"69.58.156.77","remote_port":"56821","client_ip":"69.58.156.77","proto":"HTTP/1.1","method":"GET","host":"bookmarks.laniecarmelo.tech","uri":"/dashboard","headers":{"Sec-Fetch-Dest":["document"],"Sec-Fetch-Site":["none"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Mode":["navigate"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7"],"Connection":["keep-alive"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua":["\"Microsoft Edge\";v=\"135\", \"Not-A.Brand\";v=\"8\", \"Chromium\";v=\"135\""],"Dnt":["1"],"Upgrade-Insecure-Requests":["1"],"Accept-Language":["en-US,en;q=0.9"],"Cookie":["REDACTED"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"bookmarks.laniecarmelo.tech"}},"bytes_read":0,"user_id":"","duration":0.307837821,"size":7359,"status":200,"resp_headers":{"Set-Cookie":["REDACTED"],"Vary":["Accept-Encoding"],"Server":["Caddy","Caddy"],"Content-Security-Policy":["default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"],"Content-Encoding":["zstd"],"X-Content-Type-Options":["nosniff"],"X-Xss-Protection":["1; mode=block"],"Content-Type":["text/html; charset=UTF-8"],"Cache-Control":["no-cache, private"],"Date":["Wed, 26 Feb 2025 22:27:54 GMT"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Referrer-Policy":["strict-origin-when-cross-origin"],"Strict-Transport-Security":["max-age=31536000; includeSubDomains; preload"]}}
Feb 26 16:27:55 stormux caddy[1041313]: {"level":"debug","ts":1740608875.0091498,"logger":"events","msg":"event","name":"tls_get_certificate","id":"fe132da7-155f-4baa-9fcc-c64869400d4e","origin":"tls","data":{"client_hello":{"CipherSuites":[19018,4865,4866,4867,49195,49199,49196,49200,52393,52392,49171,49172,156,157,47,53],"ServerName":"bookmarks.laniecarmelo.tech","SupportedCurves":[43690,4588,29,23,24],"SupportedPoints":"AA==","SignatureSchemes":[1027,2052,1025,1283,2053,1281,2054,1537],"SupportedProtos":["h2","http/1.1"],"SupportedVersions":[2570,772,771],"RemoteAddr":{"IP":"69.58.156.77","Port":56397,"Zone":""},"LocalAddr":{"IP":"192.168.1.137","Port":443,"Zone":""}}}}
Feb 26 16:27:55 stormux caddy[1041313]: {"level":"debug","ts":1740608875.0092406,"logger":"tls.handshake","msg":"choosing certificate","identifier":"bookmarks.laniecarmelo.tech","num_choices":1}
Feb 26 16:27:55 stormux caddy[1041313]: {"level":"debug","ts":1740608875.0092478,"logger":"tls.handshake","msg":"default certificate selection results","identifier":"bookmarks.laniecarmelo.tech","subjects":["bookmarks.laniecarmelo.tech"],"managed":true,"issuer_key":"acme-v02.api.letsencrypt.org-directory","hash":"be80f0a7b4251e70bb9bdef3f9811fa3e9d7fd6b251bef1c99210401f9215350"}
Feb 26 16:27:55 stormux caddy[1041313]: {"level":"debug","ts":1740608875.009256,"logger":"tls.handshake","msg":"matched certificate in cache","remote_ip":"69.58.156.77","remote_port":"56397","subjects":["bookmarks.laniecarmelo.tech"],"managed":true,"expiration":1748213719,"hash":"be80f0a7b4251e70bb9bdef3f9811fa3e9d7fd6b251bef1c99210401f9215350"}
Feb 26 16:27:55 stormux caddy[1041313]: {"level":"debug","ts":1740608875.1878107,"logger":"http.handlers.reverse_proxy","msg":"upstream roundtrip","upstream":"127.0.0.1:3009","duration":0.1675597,"request":{"remote_ip":"69.58.156.77","remote_port":"56397","client_ip":"69.58.156.77","proto":"HTTP/1.1","method":"GET","host":"bookmarks.laniecarmelo.tech","uri":"/api/v1/instance","headers":{"Sec-Fetch-Site":["none"],"Cookie":["REDACTED"],"Sec-Fetch-Storage-Access":["active"],"X-Forwarded-For":["69.58.156.77:56397"],"Accept-Encoding":["gzip, deflate, br, zstd"],"X-Forwarded-Port":["443"],"X-Real-Ip":["69.58.156.77:56397"],"Front-End-Https":["On"],"X-Forwarded-Proto":["https"],"X-Forwarded-Host":["bookmarks.laniecarmelo.tech"],"Accept":["*/*"],"Sec-Fetch-Mode":["cors"],"Dnt":["1"],"Sec-Fetch-Dest":["empty"],"Accept-Language":["en-US,en;q=0.9"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"bookmarks.laniecarmelo.tech"}},"headers":{"Cache-Control":["no-cache, private"],"Content-Encoding":["zstd"],"Date":["Wed, 26 Feb 2025 22:27:55 GMT"],"Server":["Caddy"],"Status":["404 Not Found"],"Access-Control-Allow-Origin":["*"],"Content-Type":["text/html; charset=UTF-8"],"Vary":["Accept-Encoding"]},"status":404}
Feb 26 16:27:55 stormux caddy[1041313]: {"level":"info","ts":1740608875.1891196,"logger":"http.log.access.log6","msg":"handled request","request":{"remote_ip":"69.58.156.77","remote_port":"56397","client_ip":"69.58.156.77","proto":"HTTP/1.1","method":"GET","host":"bookmarks.laniecarmelo.tech","uri":"/api/v1/instance","headers":{"Sec-Fetch-Site":["none"],"Cookie":["REDACTED"],"Accept-Language":["en-US,en;q=0.9"],"Connection":["keep-alive"],"Dnt":["1"],"Sec-Fetch-Mode":["cors"],"Sec-Fetch-Storage-Access":["active"],"Accept":["*/*"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Dest":["empty"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36 Edg/135.0.0.0"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"bookmarks.laniecarmelo.tech"}},"bytes_read":0,"user_id":"","duration":0.169018768,"size":2592,"status":404,"resp_headers":{"X-Xss-Protection":["1; mode=block"],"Access-Control-Allow-Origin":["*"],"X-Content-Type-Options":["nosniff"],"Content-Encoding":["zstd"],"Vary":["Accept-Encoding"],"Cache-Control":["no-cache, private"],"Date":["Wed, 26 Feb 2025 22:27:55 GMT"],"Status":["404 Not Found"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Strict-Transport-Security":["max-age=31536000; includeSubDomains; preload"],"Content-Type":["text/html; charset=UTF-8"],"Server":["Caddy","Caddy"],"Referrer-Policy":["strict-origin-when-cross-origin"],"Content-Security-Policy":["default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"]}}
[lanie@stormux ~] $ 

I've switched to caddy.json instead of a Caddyfile, and that config is below:

Caddy.json

{
  "admin": {
    "listen": "127.0.0.1:2019",
    "enforce_origin": false,
    "origins": [
      "localhost",
      "127.0.0.1",
      "caddy.laniecarmelo.tech"
    ]
  },
  "logging": {
    "logs": {
      "default": {
        "level": "DEBUG",
        "exclude": [
          "http.log.access.log0",
          "http.log.access.log1",
          "http.log.access.log10",
          "http.log.access.log11",
          "http.log.access.log12",
          "http.log.access.log13",
          "http.log.access.log2",
          "http.log.access.log3",
          "http.log.access.log4",
          "http.log.access.log5",
          "http.log.access.log6",
          "http.log.access.log7",
          "http.log.access.log8",
          "http.log.access.log9"
        ]
      },
      "log0": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log0"
        ]
      },
      "log1": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log1"
        ]
      },
      "log10": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log10"
        ]
      },
      "log11": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log11"
        ]
      },
      "log12": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log12"
        ]
      },
      "log13": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log13"
        ]
      },
      "log2": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log2"
        ]
      },
      "log3": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log3"
        ]
      },
      "log4": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log4"
        ]
      },
      "log5": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log5"
        ]
      },
      "log6": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log6"
        ]
      },
      "log7": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log7"
        ]
      },
      "log8": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log8"
        ]
      },
      "log9": {
        "writer": {
          "output": "stdout"
        },
        "encoder": {
          "format": "json"
        },
        "level": "DEBUG",
        "include": [
          "http.log.access.log9"
        ]
      }
    }
  },
  "apps": {
    "http": {
      "http_port": 80,
      "https_port": 443,
      "servers": {
        "srv0": {
          "listen": [
            ":443"
          ],
          "routes": [
            {
              "match": [
                {
                  "host": [
                    "bookmarks.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "static_response",
                          "headers": {
                            "Location": [
                              "https://{http.request.host}{http.request.uri}"
                            ]
                          },
                          "status_code": 302
                        }
                      ],
                      "match": [
                        {
                          "protocol": "http"
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "reverse_proxy",
                          "headers": {
                            "request": {
                              "set": {
                                "Front-End-Https": [
                                  "On"
                                ],
                                "Host": [
                                  "{http.request.host}"
                                ],
                                "X-Forwarded-For": [
                                  "{http.request.remote}"
                                ],
                                "X-Forwarded-Port": [
                                  "443"
                                ],
                                "X-Forwarded-Proto": [
                                  "https"
                                ],
                                "X-Real-Ip": [
                                  "{http.request.remote}"
                                ]
                              }
                            }
                          },
                          "upstreams": [
                            {
                              "dial": "127.0.0.1:3009"
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "caddy.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "static_response",
                          "headers": {
                            "Location": [
                              "https://{http.request.host}{http.request.uri}"
                            ]
                          },
                          "status_code": 302
                        }
                      ],
                      "match": [
                        {
                          "protocol": "http"
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "reverse_proxy",
                          "headers": {
                            "request": {
                              "set": {
                                "Front-End-Https": [
                                  "On"
                                ],
                                "Host": [
                                  "{http.request.host}"
                                ],
                                "X-Forwarded-For": [
                                  "{http.request.remote}"
                                ],
                                "X-Forwarded-Port": [
                                  "443"
                                ],
                                "X-Forwarded-Proto": [
                                  "https"
                                ],
                                "X-Real-Ip": [
                                  "{http.request.remote}"
                                ]
                              }
                            }
                          },
                          "upstreams": [
                            {
                              "dial": "127.0.0.1:2019"
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "adguard.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:3001"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "header": {
                            "X-Forwarded-Proto": [
                              "https"
                            ]
                          },
                          "path": [
                            "/control*",
                            "/api*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:3001"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "recipes.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "vars",
                                  "root": "/opt/docker/tandoor/media_files"
                                },
                                {
                                  "handler": "headers",
                                  "response": {
                                    "set": {
                                      "Content-Security-Policy": [
                                        "default-src 'self' https: data:"
                                      ],
                                      "Strict-Transport-Security": [
                                        "max-age=31536000; includeSubDomains"
                                      ],
                                      "X-Content-Type-Options": [
                                        "nosniff"
                                      ]
                                    }
                                  }
                                },
                                {
                                  "handler": "rewrite",
                                  "strip_path_prefix": "/media"
                                },
                                {
                                  "handler": "file_server",
                                  "hide": [
                                    "docker-compose.yml",
                                    "/etc/caddy/Caddyfile"
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "path": [
                            "/media/*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:8081"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "header": {
                            "X-Forwarded-Proto": [
                              "https"
                            ]
                          },
                          "path": [
                            "/api/*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:8081"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "glances.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        },
                        {
                          "encodings": {
                            "gzip": {}
                          },
                          "handler": "encode",
                          "prefer": [
                            "gzip"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:61208"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "header": {
                            "X-Forwarded-Proto": [
                              "https"
                            ]
                          },
                          "path": [
                            "/api/*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:61208"
                                    }
                                  ]
                                },
                                {
                                  "encodings": {
                                    "gzip": {}
                                  },
                                  "handler": "encode",
                                  "prefer": [
                                    "gzip"
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "dockge.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:5001"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "header": {
                            "X-Forwarded-Proto": [
                              "https"
                            ]
                          },
                          "path": [
                            "/api/*",
                            "/auth/*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:5001"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "dozzle.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        },
                        {
                          "handler": "reverse_proxy",
                          "headers": {
                            "request": {
                              "set": {
                                "Front-End-Https": [
                                  "On"
                                ],
                                "Host": [
                                  "{http.request.host}"
                                ],
                                "X-Forwarded-For": [
                                  "{http.request.remote}"
                                ],
                                "X-Forwarded-Port": [
                                  "443"
                                ],
                                "X-Forwarded-Proto": [
                                  "https"
                                ],
                                "X-Real-Ip": [
                                  "{http.request.remote}"
                                ]
                              }
                            }
                          },
                          "upstreams": [
                            {
                              "dial": "127.0.0.1:8080"
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "uptime.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:3006"
                                    }
                                  ]
                                }
                              ]
                            },
                            {
                              "handle": [
                                {
                                  "handler": "static_response",
                                  "headers": {
                                    "Location": [
                                      "/api/status/{path_1}"
                                    ]
                                  },
                                  "status_code": 302
                                }
                              ],
                              "match": [
                                {
                                  "path": [
                                    "/api/status-page/*"
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "header": {
                            "X-Forwarded-Proto": [
                              "https"
                            ]
                          },
                          "path": [
                            "/api/*",
                            "/status/*",
                            "/status-page/*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:3006"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "beszel.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:8090"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "header": {
                            "X-Forwarded-Proto": [
                              "https"
                            ]
                          },
                          "path": [
                            "/api/*",
                            "/metrics*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:8090"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "home.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        },
                        {
                          "handler": "reverse_proxy",
                          "headers": {
                            "request": {
                              "set": {
                                "Front-End-Https": [
                                  "On"
                                ],
                                "Host": [
                                  "{http.request.host}"
                                ],
                                "X-Forwarded-For": [
                                  "{http.request.remote}"
                                ],
                                "X-Forwarded-Port": [
                                  "443"
                                ],
                                "X-Forwarded-Proto": [
                                  "https"
                                ],
                                "X-Real-Ip": [
                                  "{http.request.remote}"
                                ]
                              }
                            }
                          },
                          "upstreams": [
                            {
                              "dial": "127.0.0.1:3000"
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "code.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        },
                        {
                          "handler": "reverse_proxy",
                          "headers": {
                            "request": {
                              "set": {
                                "Front-End-Https": [
                                  "On"
                                ],
                                "Host": [
                                  "{http.request.host}"
                                ],
                                "X-Forwarded-For": [
                                  "{http.request.remote}"
                                ],
                                "X-Forwarded-Port": [
                                  "443"
                                ],
                                "X-Forwarded-Proto": [
                                  "https"
                                ],
                                "X-Real-Ip": [
                                  "{http.request.remote}"
                                ]
                              }
                            }
                          },
                          "upstreams": [
                            {
                              "dial": "127.0.0.1:3012"
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "wiki.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "vars",
                                  "root": "/opt/docker/bookstack/uploads"
                                },
                                {
                                  "handler": "headers",
                                  "response": {
                                    "set": {
                                      "Content-Security-Policy": [
                                        "default-src 'self' https: data:"
                                      ],
                                      "Strict-Transport-Security": [
                                        "max-age=31536000; includeSubDomains"
                                      ],
                                      "X-Content-Type-Options": [
                                        "nosniff"
                                      ]
                                    }
                                  }
                                },
                                {
                                  "handler": "rewrite",
                                  "strip_path_prefix": "/media"
                                },
                                {
                                  "handler": "file_server",
                                  "hide": [
                                    "/etc/caddy/Caddyfile"
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "path": [
                            "/media/*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "reverse_proxy",
                          "headers": {
                            "request": {
                              "set": {
                                "Front-End-Https": [
                                  "On"
                                ],
                                "Host": [
                                  "{http.request.host}"
                                ],
                                "X-Forwarded-For": [
                                  "{http.request.remote}"
                                ],
                                "X-Forwarded-Port": [
                                  "443"
                                ],
                                "X-Forwarded-Proto": [
                                  "https"
                                ],
                                "X-Real-Ip": [
                                  "{http.request.remote}"
                                ]
                              }
                            }
                          },
                          "upstreams": [
                            {
                              "dial": "127.0.0.1:5000"
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "git.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "Remote-Email": [
                                          "{http.auth.user.email}"
                                        ],
                                        "Remote-User": [
                                          "{http.auth.user.id}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:3008"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "header": {
                            "X-Forwarded-Proto": [
                              "https"
                            ]
                          },
                          "path": [
                            "/api/*",
                            "/api/v1/*",
                            "/login/oauth/*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "Remote-Email": [
                                          "{http.auth.user.email}"
                                        ],
                                        "Remote-User": [
                                          "{http.auth.user.id}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:3008"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "irc.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        },
                        {
                          "handler": "reverse_proxy",
                          "headers": {
                            "request": {
                              "set": {
                                "Front-End-Https": [
                                  "On"
                                ],
                                "Host": [
                                  "{http.request.host}"
                                ],
                                "X-Forwarded-For": [
                                  "{http.request.remote}"
                                ],
                                "X-Forwarded-Port": [
                                  "443"
                                ],
                                "X-Forwarded-Proto": [
                                  "https"
                                ],
                                "X-Real-Ip": [
                                  "{http.request.remote}"
                                ]
                              }
                            }
                          },
                          "upstreams": [
                            {
                              "dial": "127.0.0.1:3011"
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "rss.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src https: 'self' 'unsafe-inline' 'unsafe-eval'; img-src https: data:; frame-src 'self' https:; object-src 'none'"
                              ],
                              "Referrer-Policy": [
                                "strict-origin-when-cross-origin"
                              ],
                              "Strict-Transport-Security": [
                                "max-age=31536000; includeSubDomains; preload"
                              ],
                              "X-Content-Type-Options": [
                                "nosniff"
                              ],
                              "X-Xss-Protection": [
                                "1; mode=block"
                              ]
                            }
                          }
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:3010"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ],
                      "match": [
                        {
                          "header": {
                            "X-Forwarded-Proto": [
                              "https"
                            ]
                          },
                          "path": [
                            "/api/*",
                            "/reader/api/*",
                            "/v1/*"
                          ]
                        }
                      ]
                    },
                    {
                      "handle": [
                        {
                          "handler": "subroute",
                          "routes": [
                            {
                              "handle": [
                                {
                                  "handler": "reverse_proxy",
                                  "headers": {
                                    "request": {
                                      "set": {
                                        "Front-End-Https": [
                                          "On"
                                        ],
                                        "Host": [
                                          "{http.request.host}"
                                        ],
                                        "X-Forwarded-For": [
                                          "{http.request.remote}"
                                        ],
                                        "X-Forwarded-Port": [
                                          "443"
                                        ],
                                        "X-Forwarded-Proto": [
                                          "https"
                                        ],
                                        "X-Real-Ip": [
                                          "{http.request.remote}"
                                        ]
                                      }
                                    }
                                  },
                                  "upstreams": [
                                    {
                                      "dial": "127.0.0.1:3010"
                                    }
                                  ]
                                }
                              ]
                            }
                          ]
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            },
            {
              "match": [
                {
                  "host": [
                    "*.laniecarmelo.tech"
                  ]
                }
              ],
              "handle": [
                {
                  "handler": "subroute",
                  "routes": [
                    {
                      "handle": [
                        {
                          "handler": "headers",
                          "response": {
                            "set": {
                              "Content-Security-Policy": [
                                "default-src 'self';"
                              ]
                            }
                          }
                        },
                        {
                          "encodings": {
                            "gzip": {}
                          },
                          "handler": "encode",
                          "prefer": [
                            "gzip"
                          ]
                        },
                        {
                          "body": "Not Found",
                          "handler": "static_response",
                          "status_code": 404
                        }
                      ]
                    }
                  ]
                }
              ],
              "terminal": true
            }
          ],
          "errors": {
            "routes": [
              {
                "match": [
                  {
                    "host": [
                      "glances.laniecarmelo.tech"
                    ]
                  }
                ],
                "handle": [
                  {
                    "handler": "subroute",
                    "routes": [
                      {
                        "handle": [
                          {
                            "body": "Accessibility-first error: {http.error.status_code}",
                            "handler": "static_response"
                          }
                        ]
                      }
                    ]
                  }
                ],
                "terminal": true
              }
            ]
          },
          "tls_connection_policies": [
            {
              "match": {
                "sni": [
                  "bookmarks.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "adguard.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "recipes.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "glances.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "dockge.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "dozzle.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "uptime.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "beszel.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "home.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "code.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "wiki.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "git.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "irc.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {
              "match": {
                "sni": [
                  "rss.laniecarmelo.tech"
                ]
              },
              "curves": [
                "x25519",
                "secp521r1"
              ],
              "alpn": [
                "http/1.1",
                "h2"
              ]
            },
            {}
          ],
          "logs": {
            "logger_names": {
              "adguard.laniecarmelo.tech": [
                "log1"
              ],
              "beszel.laniecarmelo.tech": [
                "log12"
              ],
              "bookmarks.laniecarmelo.tech": [
                "log6"
              ],
              "code.laniecarmelo.tech": [
                "log9"
              ],
              "dockge.laniecarmelo.tech": [
                "log2"
              ],
              "dozzle.laniecarmelo.tech": [
                "log3"
              ],
              "git.laniecarmelo.tech": [
                "log7"
              ],
              "glances.laniecarmelo.tech": [
                "log11"
              ],
              "home.laniecarmelo.tech": [
                "log0"
              ],
              "irc.laniecarmelo.tech": [
                "log8"
              ],
              "recipes.laniecarmelo.tech": [
                "log5"
              ],
              "rss.laniecarmelo.tech": [
                "log13"
              ],
              "uptime.laniecarmelo.tech": [
                "log4"
              ],
              "wiki.laniecarmelo.tech": [
                "log10"
              ]
            },
            "skip_hosts": [
              "*.laniecarmelo.tech"
            ]
          }
        }
      }
    },
    "tls": {
      "automation": {
        "policies": [
          {
            "subjects": [
              "bookmarks.laniecarmelo.tech",
              "adguard.laniecarmelo.tech",
              "recipes.laniecarmelo.tech",
              "glances.laniecarmelo.tech",
              "dockge.laniecarmelo.tech",
              "dozzle.laniecarmelo.tech",
              "uptime.laniecarmelo.tech",
              "beszel.laniecarmelo.tech",
              "home.laniecarmelo.tech",
              "code.laniecarmelo.tech",
              "wiki.laniecarmelo.tech",
              "git.laniecarmelo.tech",
              "irc.laniecarmelo.tech",
              "rss.laniecarmelo.tech",
              "*.laniecarmelo.tech"
            ],
            "issuers": [
              {
                "challenges": {
                  "dns": {
                    "provider": {
                      "api_token": "redacted",
                      "name": "cloudflare"
                    }
                  },
                  "http": {
                    "alternate_port": 80
                  },
                  "tls-alpn": {
                    "alternate_port": 443
                  }
                },
                "email": "[email protected]",
                "module": "acme"
              },
              {
                "ca": "https://acme.zerossl.com/v2/DV90",
                "challenges": {
                  "dns": {
                    "provider": {
                      "api_token": "sK7FP4C2FEIgK4Mh-aSH2ThU6rpO0nwYLv2NQq8Y",
                      "name": "cloudflare"
                    }
                  },
                  "http": {
                    "alternate_port": 80
                  },
                  "tls-alpn": {
                    "alternate_port": 443
                  }
                },
                "email": "[email protected]",
                "module": "acme"
              }
            ]
          }
        ]
      }
    }
  }
}

I'm no longer using Authelia since most of my services didn't support it.