Update Caddy and compose configuration

Co-Authored-By: Oz <oz-agent@warp.dev>

caddy/Caddyfile

@@ -14,6 +14,69 @@
 	}
 }
 
-:80 {
-  redir https://{$GITEA_DOMAIN}{uri} permanent
+chat.bhatfamily.in {
+	encode zstd gzip
+	reverse_proxy gemma3-chat-ui:8080
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "SAMEORIGIN"
+		Referrer-Policy "strict-origin-when-cross-origin"
+	}
+}
+
+
+openvpn.bhatfamily.in {
+	encode zstd gzip
+	reverse_proxy https://172.17.0.1:8445 {
+		transport http {
+			tls_insecure_skip_verify
+		}
+	}
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "SAMEORIGIN"
+		Referrer-Policy "strict-origin-when-cross-origin"
+	}
+}
+
+
+nxt.bhatfamily.in {
+	encode zstd gzip
+	reverse_proxy https://172.17.0.1:8446 {
+		transport http {
+			tls_insecure_skip_verify
+		}
+	}
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "SAMEORIGIN"
+		Referrer-Policy "strict-origin-when-cross-origin"
+	}
+}
+
+
+vpn.bhatfamily.in {
+	encode zstd gzip
+	reverse_proxy https://172.17.0.1:943 {
+		transport http {
+			tls_insecure_skip_verify
+		}
+	}
+
+	header {
+		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
+		X-Content-Type-Options "nosniff"
+		X-Frame-Options "SAMEORIGIN"
+		Referrer-Policy "strict-origin-when-cross-origin"
+	}
+}
+
+:80 {
+	redir https://{host}{uri} permanent
 }

docker-compose.yml

@@ -72,3 +72,10 @@ services:
       - ./caddy/Caddyfile:/etc/caddy/Caddyfile:ro
       - ${GITEA_BASE_PATH}/caddy-data:/data
       - ${GITEA_BASE_PATH}/caddy-config:/config
+    networks:
+      - default
+      - gemma3-vllm-stack_default
+
+networks:
+  gemma3-vllm-stack_default:
+    external: true