Set up Traefik. Had it working with authelia to forward requests to authenticate then to the destination.

Friend mentioned caddy and a plugin that means all you need are docker labels. So I spent the next 3 days setting up caddy.

Accidentally overwritten my compose file and had to restart.

Luckily my authelia was saved elsewhere. But after fixing it

I ran git init and git add .

I shall be a fool no more.

Anyways, now I’ve got cloudflare blocking all requests outside of the UK, as well my friends and I don’t live outside of it. Set it up such that caddy uses the DNS challenge with cloudflare API key.

So now I can set a DNS entry for internally only. E.g. internal.example.com resolves to a private address for tailscale.