---

- name: Add caddy reverse proxy config
  blockinfile:
    path: /etc/caddy/Caddyfile
    marker: "# {mark} ANSIBLE MANAGED BLOCK {{ vhost_id }}"
    block: |
      {{ vhost_domains | join(' ') }} {
        reverse_proxy {{ proxy_target_protocol }}://{{ proxy_target_host }}:{{ proxy_target_port }} {
        {% if proxy_target_protocol == 'https' and proxy_target_host == 'localhost' %}
          transport http {
            tls_insecure_skip_verify
          }
        {% endif %}
        }
      }
    validate: 'caddy validate --config %s --adapter caddyfile'
    backup: true
  notify: reload caddy