Caddyfile

manage.docker.plusminus.io {
  tls mohemohe@ghippos.net
  log stdout
  errors stderr
  proxy / portainer_portainer:9000 {
    #transparent
    websocket
  }
}

minio.plusminus.io {
  tls mohemohe@ghippos.net
  log stdout
  errors stderr

#  bind 0.0.0.0

  realip {
    from 10.0.0.0/8
    from 172.16.0.0/12
    from 192.168.0.0/16
  }

  #proxy / minio:9000 {
  #  transparent
  #  websocket
    #header_upstream X-Forwarded-Proto {scheme}
    #header_upstream X-Forwarded-Host {host}
    #header_upstream Host {host}
  #  health_check /minio/health/ready
  #}

  proxy /mastodon https://media.mstdn.plusminus.io {
    without /mastodon
  }
}

media.mstdn.plusminus.io {
  tls mohemohe@ghippos.net
  log stdout
  errors stderr

#  bind 0.0.0.0

  realip {
    from 10.0.0.0/8
    from 172.16.0.0/12
    from 192.168.0.0/16
  }

  rewrite {
    if {path} is /
    to /index.html
  }

  proxy / https://s3.us-west-1.wasabisys.com/media-mstdn-plusminus-io/
  cache {
    status_header X-Plusminus-Cache-Status
    default_max_age 1h
    path /data/cache
  }
}

mstdn.plusminus.io {
  tls mohemohe@ghippos.net
  log stdout
  errors stdout

  realip {
    from 10.0.0.0/8
    from 172.16.0.0/12
    from 192.168.0.0/16
  }
  
  header / {
    X-Robots-Tag "noindex,nofollow,noarchive"
  }

  header /emoji Cache-Control "public, max-age=31536000, immutable"
  header /packs Cache-Control "public, max-age=31536000, immutable"
  header /system/accounts/avatars Cache-Control "public, max-age=31536000, immutable"
  header /system/media_attachments/files Cache-Control "public, max-age=31536000, immutable"

  proxy / http://mastodon_web:3000 {
    transparent
  }
  
  proxy /api/v1/streaming http://mastodon_streaming:4000 {
    transparent
    websocket
  }
}

kokorobot.plusminus.io {
  tls mohemohe@ghippos.net
  log stdout                        
  errors stderr
  proxy / http://kokorobot:8080 {
    transparent
    websocket
  }
}

docker-compose.yml

version: '3.2'
services:
  caddy:
    image: abiosoft/caddy:no-stats
    command: >
      -conf /etc/Caddyfile
      -quic
      -log stdout
    environment:
      - ACME_AGREE=true
    volumes:
      - caddy_data:/root/.caddy
      - caddy_etc:/etc
      - ./robots:/robots
    networks:
      - wan
      - lan
    ports:
      - target: 80
        published: 80
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: tcp
        mode: host
      - target: 443
        published: 443
        protocol: udp
        mode: host
    logging:
      driver: syslog
      options:
        tag: caddy
    deploy:
      placement:
        constraints:
          - node.role == manager
    ulimits:
      nproc: 65535
      nofile:
        soft: 20000
        hard: 40000
volumes:
  caddy_data:
    external: true
  caddy_etc:
    external: true
networks:
  wan:
  lan:
    external: true