add caddy labels

abra.sh

@@ -6,7 +6,7 @@ export FLOW_RECOVERY_VERSION=v2
 export FLOW_TRANSLATION_VERSION=v3
 export SYSTEM_BRAND_VERSION=v4
 export NEXTCLOUD_CONFIG_VERSION=v3
-export WORDPRESS_CONFIG_VERSION=v5
+export WORDPRESS_CONFIG_VERSION=v6
 export MATRIX_CONFIG_VERSION=v3
 export WEKAN_CONFIG_VERSION=v5
 export VIKUNJA_CONFIG_VERSION=v3

compose.yml

@@ -70,12 +70,14 @@ services:
         - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirect,${STACK_NAME}-frameOptions,${STACK_NAME}-redirect"
         - "traefik.http.middlewares.${STACK_NAME}-frameOptions.headers.customFrameOptionsValue=SAMEORIGIN"
         - "traefik.http.middlewares.${STACK_NAME}-frameOptions.headers.contentSecurityPolicy=frame-ancestors ${X_FRAME_OPTIONS_ALLOW_FROM}"
-        - "coop-cloud.${STACK_NAME}.version=11.0.2+2026.2.1"
+        - "coop-cloud.${STACK_NAME}.version=11.0.3+2026.2.1"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.regex=^https://(${REDIRECTS})/(.*)"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
-
+        - "caddy=${DOMAIN}"
+        - "caddy.reverse_proxy={{upstreams 9000}}"
+        - "caddy.tls.on_demand="
   worker:
     image: ghcr.io/goauthentik/server:2026.2.1
     command: worker

wordpress.yaml.tmpl

@@ -52,7 +52,7 @@ entries:
     name: {{ env "WORDPRESS_GROUP" }}
   attrs:
     users:
-    - 6
+    - !Find [authentik_core.user, [username, "akadmin"]]
   id: wordpress_group
   model: authentik_core.group