diff --git a/proxy/etc/caddy/Caddyfile b/proxy/etc/caddy/Caddyfile
new file mode 100644
index 0000000..f66379f
--- /dev/null
+++ b/proxy/etc/caddy/Caddyfile
@@ -0,0 +1,62 @@
+# Global options
+{
+        #acme_dns duckdns 22ef93f5-4605-4328-b7cf-54b40f2440a3
+        acme_dns duckdns {env.DUCKDNS_TOKEN}
+}
+
+hrwz.duckdns.org {
+        reverse_proxy http://192.168.1.205:11000
+}
+
+office.hrwz.duckdns.org {
+        reverse_proxy http://192.168.1.205:9981
+}
+
+resheff.duckdns.org, *.resheff.duckdns.org {
+        # Terminate TLS using DNS-01 challenge via DuckDNS
+        tls {
+                dns duckdns {env.DUCKDNS_TOKEN}
+        }
+
+        # Specific rules for draw.resheff.duckdns.org
+        @draw host draw.resheff.duckdns.org
+        handle @draw {
+                handle /storage/* {
+                        reverse_proxy http://192.168.1.220:9014 {
+                                header_up Host {host}
+                                header_up X-Real-IP {remote}
+                        }
+                }
+
+                handle /socket.io/* {
+                        reverse_proxy http://192.168.1.220:9015 {
+                                header_up Host {host}
+                                header_up X-Real-IP {remote}
+                                header_up Upgrade {http.request.header.Upgrade}
+                                header_up Connection {http.request.header.Connection}
+                        }
+                }
+        }
+
+        # New proxy for stash.resheff.duckdns.org
+        @stash host stash.resheff.duckdns.org
+        handle @stash {
+                reverse_proxy galaxy.lan:9999 {
+                        header_up Host {host}
+                        header_up X-Real-IP {remote_host}
+                        header_up X-Forwarded-Port {server_port}
+                }
+        }
+
+        # Proxy all other traffic to galaxy.lan
+        handle {
+                reverse_proxy http://galaxy.lan
+                #reverse_proxy http://galaxy.lan {
+                #       header_up Host {http.request.host}
+                #       header_up X-Real-IP {remote}
+                #       header_up X-Forwarded-For {remote}
+                #       header_up X-Forwarded-Port {server.listen.port}
+                #       header_up X-Forwarded-Proto {scheme}
+                #}
+        }
+}
\ No newline at end of file