conduit/complement/caddy.json

{
    "logging": {
        "logs": {
            "default": {
                "level": "WARN"
            }
        }
    },
    "apps": {
        "http": {
            "https_port": 8448,
            "servers": {
                "srv0": {
                    "listen": [":8448"],
                    "routes": [{
                        "match": [{
                            "host": ["your.server.name"]
                        }],
                        "handle": [{
                            "handler": "subroute",
                            "routes": [{
                                "handle": [{
                                    "handler": "reverse_proxy",
                                    "upstreams": [{
                                        "dial": "127.0.0.1:8008"
                                    }]
                                }]
                            }]
                        }],
                        "terminal": true
                    }],
                    "tls_connection_policies": [{
                        "match": {
                            "sni": ["your.server.name"]
                        }
                    }]
                }
            }
        },
        "pki": {
            "certificate_authorities": {
                "local": {
                    "name": "Complement CA",
                    "root": {
                        "certificate": "/complement/ca/ca.crt",
                        "private_key": "/complement/ca/ca.key"
                    },
                    "intermediate": {
                        "certificate": "/complement/ca/ca.crt",
                        "private_key": "/complement/ca/ca.key"
                    }
                }
            }
        },
        "tls": {
            "automation": {
                "policies": [{
                    "subjects": ["your.server.name"],
                    "issuers": [{
                        "module": "internal"
                    }],
                    "on_demand": true
                }, {
                    "issuers": [{
                        "module": "internal",
                        "ca": "local"
                    }]
                }]
            }
        }
    }
}