From b404a40b581fc3989a6198ddb75849726734dd26 Mon Sep 17 00:00:00 2001
From: Andreas Knuth <andreas.knuth@gmail.com>
Date: Tue, 28 Apr 2026 11:46:05 -0500
Subject: [PATCH 1/2] innungsapp wildcard

---
 Caddyfile | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/Caddyfile b/Caddyfile
index 402ad9e..de68af0 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -48,14 +48,21 @@ www.qrmaster.net, qrmaster.net {
 ##############
 ##### INNUNGSAPP
 ##############
-www.innungsapp.com, innungsapp.com {
+*.innungsapp.com, innungsapp.com {
+    # Nutzt die oben definierte Cloudflare DNS-Challenge
+    tls {
+        dns cloudflare {env.CLOUDFLARE_API_TOKEN}
+    }
+
     handle {
         reverse_proxy innungsapp-admin:3000
     }
+
     log {
         output file /var/log/caddy/innungsapp.log
         format console
     }
+
     encode gzip
 }
 ##############

From 3b418a93680dde5e14f6b26d774e027fc10095c1 Mon Sep 17 00:00:00 2001
From: Andreas Knuth <andreas.knuth@gmail.com>
Date: Tue, 28 Apr 2026 12:07:02 -0500
Subject: [PATCH 2/2] act. status

---
 Caddyfile | 179 ++++++++++++++++++++++--------------------------------
 1 file changed, 72 insertions(+), 107 deletions(-)

diff --git a/Caddyfile b/Caddyfile
index de68af0..9d887ab 100644
--- a/Caddyfile
+++ b/Caddyfile
@@ -2,8 +2,17 @@
     email {env.CLOUDFLARE_EMAIL}
     acme_dns cloudflare {env.CLOUDFLARE_API_TOKEN}
     acme_ca https://acme-v02.api.letsencrypt.org/directory
-    debug
 }
+:80 {
+    respond "Caddy alive on new Contabo — migration in progress" 200
+}
+
+git.bizmatch.net {
+    handle {
+        reverse_proxy gitea:3500
+    }
+}
+
 ##############
 ##### BIZMATCH
 ##############
@@ -13,7 +22,7 @@ www.bizmatch.net, bizmatch.net {
         root * /home/aknuth/git/bizmatch-project/bizmatch-server
         file_server
     }
-    
+
     handle {
         reverse_proxy bizmatch-ssr:4000
     }
@@ -30,21 +39,7 @@ auth.bizmatch.net {
             header_up X-Real-IP {remote_host}
         }
 }
-git.bizmatch.net {
-    handle {
-        reverse_proxy gitea:3500
-    }
-}
 
-
-##############
-##### QRMASTER
-##############
-www.qrmaster.net, qrmaster.net {
-    handle {
-        reverse_proxy qrmaster-web:3000
-    }
-}
 ##############
 ##### INNUNGSAPP
 ##############
@@ -65,54 +60,7 @@ www.qrmaster.net, qrmaster.net {
 
     encode gzip
 }
-##############
-##### BAYAREA
-##############
-bayarea-cc.com {
-    # 1. API Requests -> NestJS Backend auf Port 3073
-    handle /api/* {
-        reverse_proxy host.docker.internal:3073
-    }
 
-    # 2. Frontend Requests -> Angular Nginx auf Port 3072
-    handle {
-        reverse_proxy host.docker.internal:3072
-    }
-    
-    log {
-        output file /var/log/caddy/bayarea.access.log
-    }
-    encode gzip zstd
-}
-
-www.bayarea-cc.com {
-    redir https://bayarea-cc.com{uri} permanent
-}
-
-##############
-##### ANNAVILLE
-##############
-annavillesda.org {
-  # API requests to backend
-  handle /api/* {
-    reverse_proxy host.docker.internal:3070
-  }
-  
-  # Frontend requests to Nginx container
-  handle {
-    reverse_proxy host.docker.internal:3071
-  }
-  
-  log {
-    output file /var/log/caddy/annaville.access.log
-  }
-  
-  encode gzip
-}
-
-www.annavillesda.org {
-    redir https://annavillesda.org{uri} permanent
-}
 ##############
 ##### GREENLENS
 ##############
@@ -134,6 +82,16 @@ greenlenspro.com {
     reverse_proxy landing:3000
   }
 }
+
+##############
+##### QRMASTER
+##############
+www.qrmaster.net, qrmaster.net {
+    handle {
+        reverse_proxy qrmaster-web:3000
+    }
+}
+
 ############################
 ##### config.email-bayarea.com
 ############################
@@ -157,6 +115,56 @@ config.email-bayarea.com {
     }
     encode gzip zstd
 }
+
+##############
+##### ANNAVILLE
+##############
+annavillesda.org {
+  # API requests to backend
+  handle /api/* {
+    reverse_proxy host.docker.internal:3070
+  }
+
+  # Frontend requests to Nginx container
+  handle {
+    reverse_proxy host.docker.internal:3071
+  }
+
+  log {
+    output file /var/log/caddy/annaville.access.log
+  }
+
+  encode gzip
+}
+
+www.annavillesda.org {
+    redir https://annavillesda.org{uri} permanent
+}
+
+##############
+##### BAYAREA
+##############
+bayarea-cc.com {
+    # 1. API Requests -> NestJS Backend auf Port 3073
+    handle /api/* {
+        reverse_proxy host.docker.internal:3073
+    }
+
+    # 2. Frontend Requests -> Angular Nginx auf Port 3072
+    handle {
+        reverse_proxy host.docker.internal:3072
+    }
+
+    log {
+        output file /var/log/caddy/bayarea.access.log
+    }
+    encode gzip zstd
+}
+
+www.bayarea-cc.com {
+    redir https://bayarea-cc.com{uri} permanent
+}
+
 ##############
 ##### POCS
 ##############
@@ -171,39 +179,7 @@ cielectrical.bayarea-cc.com {
     }
     encode gzip zstd
 }
-hamptonbrown.bayarea-cc.com {
-    # wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
-    handle {
-        reverse_proxy host.docker.internal:3010
-    }
-    log {
-        output file /var/log/caddy/hamptonbrown.log
-        format console
-    }
-    encode gzip
-}
-nqsltd.bayarea-cc.com {
-    # wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
-    handle {
-        reverse_proxy host.docker.internal:3020
-    }
-    log {
-        output file /var/log/caddy/nqsltd.log
-        format console
-    }
-    encode gzip
-}
-gregknoppcpa.bayarea-cc.com {
-    # wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
-    handle {
-        reverse_proxy host.docker.internal:3030
-    }
-    log {
-        output file /var/log/caddy/gregknoppcpa.log
-        format console
-    }
-    encode gzip
-}
+
 buddelectric.bayarea-cc.com {
     handle {
         # NEU: Direkter Proxy zum Container auf dem nativen Next.js Port
@@ -214,15 +190,4 @@ buddelectric.bayarea-cc.com {
         format console
     }
     encode gzip zstd
-}
-iitwelders.bayarea-cc.com {
-    # wenn du API innerhalb von Next bedienst, weiterleiten an den Next Prozess
-    handle {
-        reverse_proxy host.docker.internal:8080
-    }
-    log {
-        output file /var/log/caddy/iitwelders.log
-        format console
-    }
-    encode gzip
 }
\ No newline at end of file