{
    # Global options removed to allow public ACME for .ca domains
}

# --- Landing Page (MysticOS) ---
main.bray.io {
    tls internal
    reverse_proxy mystic-home:80
}

# --- Komodo Fleet Management ---
core.bray.io {
    tls internal
    reverse_proxy localhost:9120
}

# --- Password Manager ---
vault.bray.io {
    tls internal
    reverse_proxy 100.120.171.124:80 {
        header_up Host {host}
        header_up X-Real-IP {remote_host}
    }
}

# --- Git Services ---
git.bray.io {
    tls internal
    reverse_proxy 100.98.158.31:3000
}

# --- DNS Control (Pi-hole) ---
dns.bray.io {
    tls internal
    # Redirect the root path to /admin
    redir / /admin/ 308
    reverse_proxy 100.64.238.34:80
}

# --- Database Management ---
database.bray.io {
    tls internal
    reverse_proxy 100.109.59.41:80
}

# --- Metrics (Prometheus) ---
prometheus.bray.io {
    tls internal
    reverse_proxy prometheus:9090 {
        header_up Host {host}
        header_up X-Real-IP {remote_host}
    }
}

# --- Visualization (Grafana) ---
grafana.bray.io {
    tls internal
    reverse_proxy grafana:3000 {
        header_up Host {host}
        header_up X-Real-IP {remote_host}
    }
}

# --- CoreBot Labs Legal - ToS ---
tos.corebot.ca {
    root * /usr/share/caddy/legal
    file_server {
        index tos.html
    }
}

# --- CoreBot Labs Legal - Privacy ---
privacy.corebot.ca {
    root * /usr/share/caddy/legal
    file_server {
        index privacy.html
    }
}