roles/docker/files/Caddyfile

@@ -7,7 +7,17 @@ post.thesatelliteoflove.com {
 }
 
 tasks.thesatelliteoflove.com {
-    reverse_proxy authentik-server-1:9000
+    @allowed {
+        remote_ip 100.64.0.0/10
+    }
+
+    handle @allowed {
+        reverse_proxy tasksmd:8080
+    }
+
+    handle {
+        respond "Access denied" 403
+    }
 }
 
 files.thesatelliteoflove.com {
@@ -35,8 +45,18 @@ grist.thesatelliteoflove.com {
     reverse_proxy grist-grist-1:8484
 }
 
-home.thesatelliteoflove.com {
-    reverse_proxy authentik-server-1:9000
+home.thesatelliteoflove.com:80 {
+    @allowed {
+        remote_ip 100.64.0.0/10
+    }
+
+    handle @allowed {
+        reverse_proxy glance:8080
+    }
+
+    handle {
+        respond "Access denied" 403
+    }
 }
 
 pdftools.thesatelliteoflove.com:80 {

roles/docker/handlers/main.yml

@@ -2,13 +2,6 @@
 - name: restart glance
   community.docker.docker_compose_v2:
     project_src: /opt/stacks/glance
-    files:
-      - compose.yml
-    state: restarted
-
-- name: restart caddy
-  community.docker.docker_compose_v2:
-    project_src: /opt/stacks/caddy
     files:
       - compose.yml
     state: restarted

roles/docker/tasks/caddy.yml

@@ -11,7 +11,6 @@
     dest: /opt/stacks/caddy/Caddyfile
     owner: root
     mode: 644
-  notify: restart caddy
 
 - name: copy caddy compose file
   ansible.builtin.copy:

roles/docker/templates/glance.yml.j2

@@ -86,8 +86,9 @@ pages:
         collapse-after: 3
         cache: 3h
         feeds:
-        - url: https://selfh.st/rss/
-        - url: https://www.jeffgeerling.com/blog.xml
+        - url: https://ciechanow.ski/atom.xml
+        - url: https://www.joshwcomeau.com/rss.xml
+          title: Josh Comeau
         - url: https://samwho.dev/rss.xml
         - url: https://awesomekling.github.io/feed.xml
         - url: https://ishadeed.com/feed.xml