Davide Polonio d856a8704b feat(ai): add Open WebUI with Tailscale and Caddy reverse proxy
Set up a complete AI services stack with Open WebUI as the main interface,
secured behind Caddy reverse proxy with automatic HTTPS via Namecheap DNS
challenge. Tailscale integration provides secure remote access.

- Configure Open WebUI to connect to Ollama backend
- Set up Caddy with Namecheap DNS plugin for wildcard SSL certificates
- Add Tailscale for secure networking with health checks
- Configure reverse proxy to forward requests to Open WebUI
- Enable proper header forwarding for client IP preservation
- Set up persistent volumes for data, config, and SSL certificates
- Configure JSON logging with rotation for all services
2026-03-18 22:16:58 +01:00

29 lines
663 B
Caddyfile

{
email {env.LETSENCRYPT_EMAIL}
}
*.lan.poldebra.me {
tls {
dns namecheap {
api_key {env.NAMECHEAP_API_KEY}
user {env.NAMECHEAP_API_USER}
api_endpoint https://api.namecheap.com/xml.response
}
resolvers 1.1.1.1 8.8.8.8
}
@ai host ai.lan.poldebra.me
handle @ai {
header {
X-Real-IP {remote_host}
X-Forwarded-For {remote_host}
X-Forwarded-Proto {scheme}
X-Forwarded-Host {host}
X-Forwarded-Port {server_port}
}
reverse_proxy 172.24.0.5:8080 {
header_up X-Forwarded-Proto {scheme}
}
}
}