Traditional Caddyfile Config

[outlook84]

I’ve never been used to configuring container labels, so I’ve always used a Caddyfile instead.

(tinyauth_forwarder) {
        forward_auth tinyauth:3000 {
                uri /api/auth/caddy
        }
}
*.example.com {

        @tinyauth host auth.example.com
        handle @tinyauth {
                reverse_proxy tinyauth:3000
        }

        @service1 host service1.example.com
        handle @service1 {
                import tinyauth_forwarder *
                reverse_proxy service1:6000
        }

        @service2 host service2.example.com
        handle @service2 {
                import tinyauth_forwarder *
                reverse_proxy service2:8000
        }
}

[Im-hsh]

I'm exactly as you, I hate container labels as I want my compose files to be universal as possible
I added a workaround to enable allowed paths without mounting docker.sock to tinyauth or adding labels to containers (I let caddy handle allowed paths)

(tinyauth_forwarder) {
    forward_auth tinyauth:3000 {
        uri /api/auth/caddy
    }
}

*.example.com {
    tls {
        dns cloudflare abc01abc01abc01abc01abc01abc01
                propagation_delay 2m
                resolvers 1.1.1.1
    }

    @tinyauth host tinyauth.example.com
    handle @tinyauth {
                reverse_proxy tinyauth:3000
                encode zstd gzip
    }

    @cup host cup.example.com
    handle @cup {
        @api path /api/*
        handle /api/* {
            reverse_proxy cup:8000
            encode zstd gzip
        }
        
        @require_auth {
            not path /api/*
        }
        handle @require_auth {
            import tinyauth_forwarder *
            reverse_proxy cup:8000
            encode zstd gzip
        }
    }