From de063ce46912ed5f748b149fa976501bb4afcf2a Mon Sep 17 00:00:00 2001
From: tolerryan <ryan.toler@gmail.com>
Date: Sat, 26 Sep 2026 06:25:07 +0000
Subject: [PATCH] update caddy to use netbird dns server and authelia to use
 expose port to host's localhost

---
 roles/authelia/templates/Caddyfile.j2          | 16 ++++------------
 roles/authelia/templates/docker-compose.yml.j2 | 18 ++++--------------
 2 files changed, 8 insertions(+), 26 deletions(-)

diff --git a/roles/authelia/templates/Caddyfile.j2 b/roles/authelia/templates/Caddyfile.j2
index f43067a..fda7cbd 100644
--- a/roles/authelia/templates/Caddyfile.j2
+++ b/roles/authelia/templates/Caddyfile.j2
@@ -1,29 +1,21 @@
 auth.{{ authelia_domain }} {
-    reverse_proxy authelia:{{ authelia_port }}
+    reverse_proxy 127.0.0.1:{{ authelia_port }}
 }
 
 # Reusable snippet for Authelia Forward Auth
 (authelia_auth) {
-    forward_auth http://authelia:9091 { # Replace with your Authelia IP/Port or container name
+    forward_auth http://127.0.0.1:9091 { # Replace with your Authelia IP/Port or container name
         uri /api/verify?rd=https://auth.frantecrt.duckdns.org # Replace with your public Authelia URL
         copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
     }
 }
 
-test.frantecrt.duckdns.org {
-    # Import the auth configuration block
-    import authelia_auth
-
-    # Route the traffic to your backend application if authenticated
-    reverse_proxy frantecrt.duckdns.org:8080
-}
-
 semaphore.frantecrt.duckdns.org {
     # Import the auth configuration block
     import authelia_auth
 
     # Route the traffic to your backend application if authenticated
-    reverse_proxy semaphore:3000
+    reverse_proxy semaphore.netbird.cloud:3000
 }
 
 git.frantecrt.duckdns.org {
@@ -31,5 +23,5 @@ git.frantecrt.duckdns.org {
     import authelia_auth
 
     # Route the traffic to your backend application if authenticated
-    reverse_proxy gitea:3000
+    reverse_proxy semaphore.netbird.cloud:3000
 }
\ No newline at end of file
diff --git a/roles/authelia/templates/docker-compose.yml.j2 b/roles/authelia/templates/docker-compose.yml.j2
index 2be7925..c3cb851 100644
--- a/roles/authelia/templates/docker-compose.yml.j2
+++ b/roles/authelia/templates/docker-compose.yml.j2
@@ -5,10 +5,8 @@ services:
     restart: unless-stopped
     volumes:
       - {{ authelia_config_dir }}:/config
-    networks:
-      - authelia_net
-    expose:
-      - "{{ authelia_port }}"
+    ports:
+      - "127.0.0.1:{{ authelia_port }}:{{ authelia_port }}"
     environment:
       - TZ={{ ansible_facts.timezone | default('UTC') }}
 
@@ -16,16 +14,8 @@ services:
     image: caddy:2
     container_name: authelia_caddy
     restart: unless-stopped
-    ports:
-      - "80:80"
-      - "443:443"
+    network_mode: host
     volumes:
       - {{ authelia_base_dir }}/Caddyfile:/etc/caddy/Caddyfile
       - {{ authelia_data_dir }}/caddy_data:/data
-      - {{ authelia_data_dir }}/caddy_config:/config
-    networks:
-      - authelia_net
-
-networks:
-  authelia_net:
-    driver: bridge
\ No newline at end of file
+      - {{ authelia_data_dir }}/caddy_config:/config
\ No newline at end of file