{
	email {$ACME_EMAIL}
}

(security_headers) {
	header {
		Strict-Transport-Security "max-age=31536000; includeSubDomains"
		X-Content-Type-Options "nosniff"
		X-Frame-Options "SAMEORIGIN"
		Referrer-Policy "strict-origin-when-cross-origin"
		-Server
	}
}

{$PUBLIC_DOMAIN} {
	import security_headers
	encode zstd gzip
	reverse_proxy frontend:3000
}

{$CMS_DOMAIN} {
	import security_headers
	encode zstd gzip
	# Uploaded media can be large; Strapi's own limit still applies.
	request_body {
		max_size 100MB
	}
	reverse_proxy cms:1337
}