"Updates"

On host/Caddyfile

@@ -33,12 +33,12 @@
         }
 
         servers {
-                client_ip_headers X-Forwarded-For X-Real-IP
-
                 # Allow the following IP to passthrough the "X-Forwarded-*" headers to SearXNG
                 # https://caddyserver.com/docs/caddyfile/options#trusted-proxies
                 trusted_proxies static private_ranges
                 trusted_proxies_strict
+
+                client_ip_headers X-Forwarded-For X-Real-IP
         }
 }
 
@@ -114,8 +114,9 @@ cloud.delmar.bzh {
                 header_up Host {upstream_hostport}
         }
 
-        redir /.well-known/carddav /remote.php/dav/ 301
-        redir /.well-known/caldav /remote.php/dav/ 301
+        # client support (e.g. os x calendar / contacts)
+        redir /.well-known/carddav /remote.php/dav 301
+        redir /.well-known/caldav /remote.php/dav 301
 
         header {
                 Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"
@@ -125,6 +126,14 @@ cloud.delmar.bzh {
         }
 }
 
+cloud.delmar.bzh:8443 {
+        reverse_proxy sheldon:8080 {
+                transport http {
+                        tls_insecure_skip_verify
+                }
+        }
+}
+
 cpt.delmar.bzh {
         encode {
                 zstd
@@ -171,7 +180,7 @@ dev.delmar.bzh {
                 gzip
                 minimum_length 1024
         }
-        reverse_proxy sheldon:19409
+        reverse_proxy sheldon:19080
 }
 
 dkr.delmar.bzh {
@@ -291,10 +300,9 @@ kontadenn.delmar.bzh {
                 @404 {
                         expression {http.error.status_code} == 404
                 }
-        rewrite @404 /
-        file_server
-    }
-
+                rewrite @404 /
+                file_server
+        }
 }
 
 mail.delmar.bzh {
@@ -303,7 +311,12 @@ mail.delmar.bzh {
                 gzip
                 minimum_length 1024
         }
-        reverse_proxy sheldon:10003
+        reverse_proxy sheldon:10003 {
+                transport http {
+                        proxy_protocol v2
+                }
+                header_up Host {upstream_hostport}
+        }
 }
 
 mailbear.delmar.bzh {
@@ -339,10 +352,9 @@ nds.delmar.bzh {
                 @404 {
                         expression {http.error.status_code} == 404
                 }
-        rewrite @404 /
-        file_server
-    }
-
+                rewrite @404 /
+                file_server
+        }
 }
 
 nsns.delmar.bzh {
@@ -358,10 +370,9 @@ nsns.delmar.bzh {
                 @404 {
                         expression {http.error.status_code} == 404
                 }
-        rewrite @404 /
-        file_server
-    }
-
+                rewrite @404 /
+                file_server
+        }
 }
 
 octoprint.delmar.bzh {
@@ -412,12 +423,12 @@ rallly.delmar.bzh {
 }
 
 search.delmar.bzh
-        encode {
-                zstd
-                gzip
-                minimum_length 1024
-        }
-        reverse_proxy sandy:23485
+encode {
+        zstd
+        gzip
+        minimum_length 1024
+}
+reverse_proxy sandy:23485
 }
 
 send.delmar.bzh {
@@ -475,10 +486,9 @@ tpml.delmar.bzh {
                 @404 {
                         expression {http.error.status_code} == 404
                 }
-        rewrite @404 /
-        file_server
-    }
-
+                rewrite @404 /
+                file_server
+        }
 }
 
 twip.delmar.bzh {
@@ -538,9 +548,9 @@ www.delmar.bzh {
                 @404 {
                         expression {http.error.status_code} == 404
                 }
-        rewrite @404 /404.html
-        file_server
-    }
+                rewrite @404 /404.html
+                file_server
+        }
 }
 
 xcd.delmar.bzh {