From 6c5d460385691c458b679867ee19549acd09bb2c Mon Sep 17 00:00:00 2001
From: Lucas <lucasroyer.dev@gmail.com>
Date: Fri, 23 Jan 2026 08:43:33 +0000
Subject: [PATCH] feat(caddyfile): add vaultwarden and syncthing support

---
 Caddyfile | 77 +++++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 77 insertions(+)

diff --git a/Caddyfile b/Caddyfile
index 2c9350b..adb4647 100755
--- a/Caddyfile
+++ b/Caddyfile
@@ -184,3 +184,80 @@ ntfy.lucasroyer.fr {
 		flush_interval -1
 	}
 }
+
+syncthing.lucasroyer.fr {
+	# Security
+	header {
+		X-Frame-Options "SAMEORIGIN"
+		X-Content-Type-Options "nosniff"
+		X-XSS-Protection "1; mode=block"
+		Referrer-Policy "strict-origin-when-cross-origin"
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+	}
+
+	# Compression
+	encode zstd gzip
+
+	# Log
+	log {
+		output file /data/syncthing_access.log
+	}
+
+	# Redirect
+	reverse_proxy syncthing:8384 {
+		header_up Host {host}
+		header_up X-Real-IP {remote_host}
+	}
+}
+
+vaultwarden.lucasroyer.fr {
+	# Security
+	header {
+		X-Frame-Options "SAMEORIGIN"
+		X-Content-Type-Options "nosniff"
+		X-XSS-Protection "1; mode=block"
+		Referrer-Policy "strict-origin-when-cross-origin"
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		Permissions-Policy "geolocation=(), microphone=(), camera=()"
+	}
+
+	# Compression
+	encode zstd gzip
+
+	# Log
+	log {
+		output file /data/vaultwarden_access.log
+	}
+
+	# Redirect
+	reverse_proxy vaultwarden:80 {
+		header_up Host {host}
+		header_up X-Real-IP {remote_host}
+	}
+}
+
+motsdepasse.interstices.pro {
+	# Security
+	header {
+		X-Frame-Options "SAMEORIGIN"
+		X-Content-Type-Options "nosniff"
+		X-XSS-Protection "1; mode=block"
+		Referrer-Policy "strict-origin-when-cross-origin"
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		Permissions-Policy "geolocation=(), microphone=(), camera=()"
+	}
+
+	# Compression
+	encode zstd gzip
+
+	# Log
+	log {
+		output file /data/vaultwarden_access.log
+	}
+
+	# Redirect
+	reverse_proxy vaultwarden-interstices:80 {
+		header_up Host {host}
+		header_up X-Real-IP {remote_host}
+	}
+}