# vim: ft=caddyfile

vault.boba.best {
    encode zstd gzip
    import hsts

    header {
        X-XSS-Protection "1; mode=block"
        X-Frame-Options "DENY"
    }

    handle /notifications/hub {
        reverse_proxy localhost:3012
    }

    handle {
        reverse_proxy localhost:81 {
            header_up X-Real-IP {remote_host}
        }
    }

    import basicerrors
}