get this in here

caddy/Caddyfile

@@ -0,0 +1,82 @@
+# The Caddyfile is an easy way to configure your Caddy web server.
+#
+# To use your own domain name (with automatic HTTPS), first make
+# sure your domain's A/AAAA DNS records are properly pointed to
+# this machine's public IP, then replace the line below with your
+# domain name.
+
+# Unless the file starts with a global options block, the first
+# uncommented line is always the address of your site.
+# Caddy will automatically obtain ACME certs for domains
+# example.com {
+#     root * /path/to/example.com
+#     file_server
+# }
+# Refer to the Caddy docs for more information:
+# https://caddyserver.com/docs/caddyfile
+
+# johnsonfamilies.net 
+pbs.johnsonfamilies.net {
+  reverse_proxy https://10.100.1.100:8007
+}
+
+portainer.johnsonfamilies.net {
+  reverse_proxy http://10.100.1.51:9000
+}
+
+cloud.johnsonfamilies.net {
+  reverse_proxy http://10.100.1.53:11000
+}
+
+pve.johnsonfamilies.net {
+  reverse_proxy https://10.100.1.50:8006
+}
+
+kuma.johnsonfamilies.net {
+  reverse_proxy http://10.100.1.51:3001
+}
+
+ds1621.johnsonfamilies.net {
+  reverse_proxy http://10.100.0.58:5000
+}
+
+ds1513.johnsonfamilies.net {
+  reverse_proxy https://10.100.0.194:5001
+}
+
+files.r720.johnsonfamilies.net {
+  reverse_proxy http://10.100.0.214:8080
+}
+chat.johnsonfamilies.net {
+  reverse_proxy http://10.100.1.51:8080
+}
+# galacticpants.net
+unifi.galacticpants.net {
+  reverse_proxy https://10.100.0.1:443 {
+    transport http {
+      tls_insecure_skip_verify
+    }
+  }
+}
+jellyfin.galacticpants.net {
+  reverse_proxy http://10.100.1.1:8196
+}
+chat.galacticpants.net {
+  reverse_proxy http://10.100.1.1:3030
+}
+vault.galacticpants.net {
+  reverse_proxy http://10.100.1.1:9090
+}
+git.galacticpants.net {
+ reverse_proxy http://10.100.1.1:3000
+}
+home.galacticpants.net {
+  reverse_proxy http://10.100.1.150:8123
+}
+immich.galacticpants.net {
+  reverse_proxy http://10.100.1.1:2283
+}
+fs.galacticpants.net {
+  root /
+  file_server browse
+}

unbound/unbound.conf

@@ -24,7 +24,6 @@ server:
   
   harden-glue: yes
 
-
 forward-zone:
   name: "woodhome.net"
   forward-addr: 10.100.0.1

unbound/unbound.conf.d/remote-control.conf

@@ -0,0 +1,5 @@
+remote-control:
+  control-enable: yes
+  # by default the control interface is is 127.0.0.1 and ::1 and port 8953
+  # it is possible to use a unix socket too
+  control-interface: /run/unbound.ctl

unbound/unbound.conf.d/root-auto-trust-anchor-file.conf

@@ -0,0 +1,4 @@
+server:
+    # The following line will configure unbound to perform cryptographic
+    # DNSSEC validation using the root trust anchor.
+    auto-trust-anchor-file: "/var/lib/unbound/root.key"