# One public origin for everything. Caddy fetches and renews the HTTPS certificate itself.
#   https://musicshare.binarygnome.com/        -> web app
#   https://musicshare.binarygnome.com/api/... -> API (prefix stripped; includes the /api/ws websocket)
{$DOMAIN} {
	encode zstd gzip

	handle_path /api/* {
		reverse_proxy api:4000
	}

	handle {
		reverse_proxy web:3737
	}

	header {
		Strict-Transport-Security "max-age=31536000; includeSubDomains"
		-Server
	}

	log {
		output stdout
		format console
	}
}