feat: add mealie and ip_only snippet to Caddyfile

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Caddyfile

@@ -25,6 +25,11 @@
 	abort @blocked
 }
 
+(ip_only) {
+	@blocked not remote_ip 24.139.235.46/32 192.168.68.0/24 2605:ba00:3108::/48 74.115.203.2/32 165.225.192.0/18
+	abort @blocked
+}
+
 # ── Main site ──────────────────────────────────────────────────────────────────
 carloselugo.com, www.carloselugo.com {
 	reverse_proxy frontend:80
@@ -141,6 +146,18 @@ route-rush.carloselugo.com {
 }
 
 
+# ── Mealie (recetas) ─────────────────────────────────────────────────────────
+mealie.carloselugo.com {
+    import ip_only
+    import security_headers
+    reverse_proxy mealie:9000
+    encode gzip
+    log {
+        output file /var/log/caddy/mealie.log
+        format json
+    }
+}
+
 # ── IT Tools ──────────────────────────────────────────────────────────────────
 tools.carloselugo.com {
     import security_headers