caddy: add block_non_private_ips snippet

blocks ips not in tailnet or in local network from accessing services
using `important block_non_private_ips` in their caddy config

modules/services/pocketid.nix

@@ -19,6 +19,7 @@
     useACMEHost = config.homelab.domain;
     extraConfig = ''
       reverse_proxy http://localhost:8025
+      import block_non_private_ips
     '';
   };
 }