---
- name: Set up the reverse proxy for internal only services
  hosts: caddy_external
  become: true
  roles:
  - role: caddy/install
  - role: caddy/proxy
    vars:
      domains:
      - name: "thatshit.live"
        sites:
        - name: "whale"
          host: 10.89.0.101
          port: 9443
          https: true
          transport_opts:
          - tls_insecure_skip_verify
      - name: "blinker.club"
        sites:
        - name: "whale"
          host: 10.89.0.101
          port: 9443
          https: true
          transport_opts:
          - tls_insecure_skip_verify
      - name: "thegrind.dev"
        sites:
        - name: "whale"
          host: 10.89.0.101
          port: 9443
          https: true
          transport_opts:
          - tls_insecure_skip_verify