upstream services > oauth2-proxy > caddy

Not sure what kind of services you want to run. But I guess you want auto https etc. so probably you want to stick to caddy.

Put https://github.com/oauth2-proxy/oauth2-proxy in front of caddy.