# =============================================================================
# NetBird v1.6 Caddyfile - No-SSL Mode (HTTP only, LAN access)
# =============================================================================
# WARNING: This configuration transmits data in plaintext.
# Only use on isolated/air-gapped networks.

{
  servers :80 {
    protocols h1 h2c
  }
  # Disable automatic HTTPS
  auto_https off
}

:80 {
    # Embedded IdP OAuth2 endpoints
    reverse_proxy /oauth2/* management:80
    reverse_proxy /.well-known/openid-configuration management:80
    reverse_proxy /.well-known/jwks.json management:80

    # NetBird Relay
    reverse_proxy /relay* relay:80

    # NetBird Signal (gRPC)
    reverse_proxy /signalexchange.SignalExchange/* h2c://signal:10000

    # NetBird Management API (gRPC)
    reverse_proxy /management.ManagementService/* h2c://management:80

    # NetBird Management REST API
    reverse_proxy /api/* management:80

    # NetBird Dashboard (catch-all)
    reverse_proxy /* dashboard:80
}