{
	email {$ACME_EMAIL}
}

{$SITE_DOMAIN} {
	encode zstd gzip

	root * /srv/site
	file_server

	header {
		X-Content-Type-Options "nosniff"
		X-Frame-Options "SAMEORIGIN"
		Referrer-Policy "strict-origin-when-cross-origin"
		Permissions-Policy "geolocation=(), microphone=(), camera=()"
	}

	log {
		output stdout
		format console
	}

	handle_path /api/* {
		reverse_proxy app:{$APP_PORT}
	}
}