# first caddyfile

{
  security {
    authorization policy marc {
      set auth url https://gate.marcpartensky.com/
      crypto key verify {env.JWT_SECRET}
      allow roles authp/admin authp/user
    }
  }
}

marc.wf {
    redir https://marcpartensky.com/{uri}
}

marc.tf {
    redir https://marcpartensky.com{uri}
}

# authent.marcpartensky.com {
#     reverse_proxy authentik:9443 {
#         tls internal
#     }
# }

# healthcheck
# :8080 {
#     status 200 /
# }
