{ inputs, ... }:
{
  imports = [ "${inputs.self}/modules/mizukios/features/caddy/common.nix" ];

  services.caddy = {
    virtualHosts."http://natsu.icn.mizuki.guru".extraConfig = ''
      respond "우응" 200
    '';
    virtualHosts."https://file.mizuki.guru".extraConfig = ''
        reverse_proxy 10.11.8.112 {
          header_up Host {host}
          header_up X-Real-IP {remote_host}
          header_up X-Forwarded-For {remote_host}
      }
    '';
    virtualHosts."http://file.mizuki.guru".extraConfig = ''
        reverse_proxy 10.11.8.112 {
          header_up Host {host}
          header_up X-Real-IP {remote_host}
          header_up X-Forwarded-For {remote_host}
      }
    '';

    virtualHosts."auth.mizuki.guru".extraConfig = ''
      reverse_proxy 10.11.8.102:9080
    '';

    virtualHosts."plutos.dazzle.st".extraConfig = ''
      reverse_proxy localhost:13000
    '';

    virtualHosts."event.dazzle.st".extraConfig = ''
      reverse_proxy localhost:9794
    '';

    virtualHosts."pve.hikari.icn.mizuki.guru".extraConfig = ''
      reverse_proxy https://10.11.8.100:8006 {
               header_up X-Real-Ip {remote_host}
               header_up X-Http-Version {http.request.proto}
               transport http {
                       tls_insecure_skip_verify
               }
       }
    '';

    virtualHosts."cockpit.hikari.icn.mizuki.guru".extraConfig = ''
      reverse_proxy https://10.11.8.100:9090 {
              header_up X-Real-Ip {remote_host}
              header_up X-Http-Version {http.request.proto}
              transport http {
                      tls_insecure_skip_verify
              }
      }
    '';

    virtualHosts."paste.mizuki.guru".extraConfig = ''
      reverse_proxy 10.11.8.102:11108
    '';
    virtualHosts."komodo.mizuki.guru".extraConfig = ''
      reverse_proxy 10.11.8.102:9120
    '';

    virtualHosts."ena.mizuki.guru".extraConfig = ''
      basic_auth {
        imnyang $2a$10$zA83XKt84pcXiwfkuvNmKOpQ5Cw0IP6m/.1AX0ahkVQaPOzrmFlxm
      }
      reverse_proxy 10.20.31.103:3000
    '';

    virtualHosts."akiyama.mizuki.guru".extraConfig = ''
      rewrite / /index.avif
      root * /var/static/akiyama.mizuki.guru
      file_server
    '';

    virtualHosts."chef.mizuki.guru".extraConfig = ''
      root * /var/static/chef.mizuki.guru
      rewrite / /CyberChef_v10.22.1.html
      file_server {
        precompressed br gzip
      }
      header {
        Cache-Control "public, max-age=31536000"
      }
    '';

    virtualHosts."blog.imnya.ng".extraConfig = ''
      reverse_proxy 127.0.0.1:4321
    '';

    virtualHosts."cfwithoutincident.imnya.ng".extraConfig = ''
      reverse_proxy 127.0.0.1:31774
    '';

    virtualHosts."pass.imnya.ng".extraConfig = ''
      reverse_proxy 127.0.0.1:10302
    '';

    virtualHosts."netbird.mizuki.guru".extraConfig = ''
      # Native gRPC (needs HTTP/2 cleartext to backend)
      @grpc header Content-Type application/grpc*
      reverse_proxy @grpc h2c://127.0.0.1:8081

      # Combined server paths (relay, signal, management, OAuth2)
      @backend path /relay* /ws-proxy/* /api/* /oauth2/*
      reverse_proxy @backend 127.0.0.1:8081

      # Dashboard (everything else)
      reverse_proxy /* 127.0.0.1:8080
    '';

  };
}