Update Caddy and compose configuration

Co-Authored-By: Oz <oz-agent@warp.dev>

caddy/Caddyfile

@@ -1,19 +1,82 @@
 {
-  email {$TLS_EMAIL}
+	email {$TLS_EMAIL}
 }
 
 {$GITEA_DOMAIN} {
-  encode zstd gzip
+	encode zstd gzip
-  reverse_proxy gitea:3000
+	reverse_proxy gitea:3000
 
-  header {
+	header {
-    Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
-    X-Content-Type-Options "nosniff"
+		X-Content-Type-Options "nosniff"
-    X-Frame-Options "SAMEORIGIN"
+		X-Frame-Options "SAMEORIGIN"
-    Referrer-Policy "strict-origin-when-cross-origin"
+		Referrer-Policy "strict-origin-when-cross-origin"
-  }
+	}
+}
+
+chat.bhatfamily.in {
+	encode zstd gzip
+	reverse_proxy gemma3-chat-ui:8080
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "SAMEORIGIN"
+		Referrer-Policy "strict-origin-when-cross-origin"
+	}
+}
+
+
+openvpn.bhatfamily.in {
+	encode zstd gzip
+	reverse_proxy https://172.17.0.1:8445 {
+		transport http {
+			tls_insecure_skip_verify
+		}
+	}
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "SAMEORIGIN"
+		Referrer-Policy "strict-origin-when-cross-origin"
+	}
+}
+
+
+nxt.bhatfamily.in {
+	encode zstd gzip
+	reverse_proxy https://172.17.0.1:8446 {
+		transport http {
+			tls_insecure_skip_verify
+		}
+	}
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "SAMEORIGIN"
+		Referrer-Policy "strict-origin-when-cross-origin"
+	}
+}
+
+
+vpn.bhatfamily.in {
+	encode zstd gzip
+	reverse_proxy https://172.17.0.1:943 {
+		transport http {
+			tls_insecure_skip_verify
+		}
+	}
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "SAMEORIGIN"
+		Referrer-Policy "strict-origin-when-cross-origin"
+	}
 }
 
 :80 {
-  redir https://{$GITEA_DOMAIN}{uri} permanent
+	redir https://{host}{uri} permanent
 }

docker-compose.yml

@@ -72,3 +72,10 @@ services:
       - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
       - ${GITEA_BASE_PATH}/caddy-data:/data
       - ${GITEA_BASE_PATH}/caddy-config:/config
+    networks:
+      - default
+      - gemma3-vllm-stack_default
+
+networks:
+  gemma3-vllm-stack_default:
+    external: true