# The vault's SilverBullet, for the operator's Caddy on docker.garrett-hall.com
# (/opt/stacks). HTTPS from Caddy's usual automatic certificate; LAN only.
# Out of date: the live site is behind Authelia and open beyond the LAN. This
# copy is updated once the operator shares it.
nisse-memory.dongar.net {
	# Anyone outside the LAN gets nothing. Caddy still answers Let's Encrypt's
	# checks, which it handles before the site's own routes.
	@outside not remote_ip private_ranges
	respond @outside 403

	reverse_proxy nisse.garrett-hall.com:3000
}