# ==============================================================================
# Azure SG (104.43.105.243 / coco-sea1) 站点扩展配置
# 存放路径：/etc/caddy/sites/homelab.conf (由主 /etc/caddy/Caddyfile 自动 import)
# ==============================================================================

# 1. 外部断网哨兵监控面板 (Uptime Kuma) -> https://status.961504.xyz
status.961504.xyz:443 {
    encode zstd gzip
    reverse_proxy 127.0.0.1:3001
}

# 2. 家庭统一导航总入口免端口 443 访问 -> https://nav.961504.xyz
nav.961504.xyz:443 {
    encode zstd gzip
    reverse_proxy 100.108.205.40:3002
}

# 3. 个人微信 / 企业微信自建应用 443 免端口回调与转发网关 -> https://wx.961504.xyz
wx.961504.xyz:443 {
    encode zstd gzip
    reverse_proxy 100.108.205.40:3005
}

# 4. AGY 24小时云端 Web 工作台 (443 免端口访问) -> https://agy.961504.xyz
# 使用 forward_auth 对接 HomeLab SSO 2.0 自定义登录卡片，彻底告别浏览器原生丑陋弹窗！
agy.961504.xyz:443 {
    encode zstd gzip
    forward_auth 100.108.205.40:3002 {
        uri /api/auth/verify
    }
    reverse_proxy 100.108.205.40:7681
}

# 5. Vaultwarden 私人密码保险箱 (443 免端口访问) -> https://vw.961504.xyz
vw.961504.xyz:443 {
    encode zstd gzip
    reverse_proxy 100.108.205.40:8222 {
        header_up X-Real-IP {remote_host}
    }
}

# 6. Codeg 多智能体协同工作台底座 (443 免端口访问) -> https://codeg.961504.xyz
codeg.961504.xyz:443 {
    encode zstd gzip
    forward_auth 100.108.205.40:3002 {
        uri /api/auth/verify
    }
    reverse_proxy 100.108.205.40:3080 {
        header_up Authorization "Bearer homelab2026"
    }
}

# 7. Gitea 私有代码托管中枢 (443 免端口访问) -> https://git.961504.xyz
git.961504.xyz:443 {
    encode zstd gzip
    @browser {
        header Accept *text/html*
    }
    forward_auth @browser 100.108.205.40:3002 {
        uri /api/auth/verify
    }
    reverse_proxy 100.108.205.40:3005 {
        header_up X-Webauth-User admin
    }
}
