https://*.<http://example.com|example.com> {
    tls {
        dns cloudflare CLOUDFLARE_TOKEN
        resolvers 1.1.1.1
    }
    
    import *.caddy
}

@harvester host <http://harvester.example.com|harvester.example.com>
handle @harvester {
    reverse_proxy <https://10.10.10.10> {
        transport http {
            tls_insecure_skip_verify
        }
    }
}

@rancher host <http://rancher.example.com|rancher.example.com>
handle @rancher {
    reverse_proxy <https://rancher> {
        transport http {
            tls_insecure_skip_verify
        }
    }
}

services:
  rancher:
    image: rancher/rancher:latest
    container_name: rancher-server
    restart: unless-stopped
    privileged: true
    # ports:
    #   - "8443:443"
    networks:
      - reverseproxy-nw
    volumes:
      - rancher-data:/var/lib/rancher
      - ./certs/cert.pem:/etc/rancher/ssl/cert.pem
      - ./certs/key.pem:/etc/rancher/ssl/key.pem
      - ./certs/cacerts.pem:/etc/rancher/ssl/cacerts.pem

volumes:
  rancher-data:

cacerts

cacerts