---
- name: Set up the reverse proxy for internal only services
  hosts: caddy_internal
  become: true
  roles:
  - role: caddy/install
  - role: caddy/proxy
    vars:
      domains:
        - name: "lan.thegrind.dev"
          sites:
            - name: "whale"
              host: 10.89.0.101
              port: 9443
              https: true
              transport_opts:
                - tls_insecure_skip_verify
            - name: "router"
              host: 10.89.0.1
              port: 8989
            - name: "adguard"
              host: 10.89.0.1
              port: 3000
            - name: "nas"
              host: 10.89.0.15
              port: 80
            - name: "streaming"
              host: 10.89.0.106
              port: 10000
              https: true
              transport_opts:
                - tls_insecure_skip_verify
            - name: "stash"
              host: 10.89.0.106
              port: 6969
            - name: "node1"
              host: 10.89.0.13
              port: 8006
              transport_opts:
                - tls_insecure_skip_verify
            - name: "node3"
              host: 10.89.0.12
              port: 8006
              transport_opts:
                - tls_insecure_skip_verify