caddy_reverse_proxy_config:
  apps:
    http:
      servers:
        rproxy:
          listen:
            - "tcp4/:443"
            - "tcp6/:443"
          automatic_https:
            disable: "{{ caddy_use_lego }}"
          tls_connection_policies:
            - match:
                sni:
                  - "{{ host_fqdn }}"
              default_sni: "{{ host_fqdn }}"
          routes:
            - match:
                - host:
                    - "{{ host_fqdn }}"
              handle:
                - handler: subroute
                  routes:
                    - handle:
                      - handler: reverse_proxy
                        upstreams:
                          - dial: "127.0.0.1:{{ reverse_proxy_port }}"
              terminal: true