From e12cdb6e6880af6951940d96d4a53bfa309238a4 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Thomas=20Gra=CC=88fenstein?= <mail@thomas-graefenstein.de>
Date: Sun, 22 Mar 2026 12:04:10 +0100
Subject: [PATCH] caddy setup

---
 caddy/Caddyfile          | 16 ++++++++++++++++
 caddy/docker-compose.yml | 19 +++++++++++++++++++
 2 files changed, 35 insertions(+)
 create mode 100644 caddy/Caddyfile
 create mode 100644 caddy/docker-compose.yml

diff --git a/caddy/Caddyfile b/caddy/Caddyfile
new file mode 100644
index 0000000..7b3dac7
--- /dev/null
+++ b/caddy/Caddyfile
@@ -0,0 +1,16 @@
+nextcloud.t-gstone.de {
+	reverse_proxy nextcloud:80
+
+	header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+
+	redir /.well-known/carddav /remote.php/dav/ 301
+	redir /.well-known/caldav /remote.php/dav/ 301
+
+	request_body {
+		max_size 10G
+	}
+}
+
+git.t-gstone.de {
+	reverse_proxy gitea:3000
+}
diff --git a/caddy/docker-compose.yml b/caddy/docker-compose.yml
new file mode 100644
index 0000000..6f7d709
--- /dev/null
+++ b/caddy/docker-compose.yml
@@ -0,0 +1,19 @@
+services:
+  caddy:
+    image: caddy:2-alpine
+    container_name: caddy
+    restart: unless-stopped
+    ports:
+      - "80:80"
+      - "443:443"
+      - "443:443/udp"
+    volumes:
+      - ./Caddyfile:/etc/caddy/Caddyfile:ro
+      - ${DATA_ROOT}/caddy/data:/data
+      - ${DATA_ROOT}/caddy/config:/config
+    networks:
+      - proxy
+
+networks:
+  proxy:
+    external: true