# Global config
{
    log {
        output file /var/log/caddy/access.log {
            roll_size 100mb
            roll_keep 5
        }
        format json
    }
}

# Zurich infrastructure
zurich.inou.com {
    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        X-Content-Type-Options "nosniff"
        X-Frame-Options "SAMEORIGIN"
        Referrer-Policy "strict-origin-when-cross-origin"
        Permissions-Policy "geolocation=(), microphone=(), camera=()"
        -Server
    }
    respond "inou security infrastructure" 200
}

ntfy.inou.com {
    reverse_proxy 127.0.0.1:2586
}

kuma.inou.com {
    log {
        output file /var/log/caddy/kuma.log {
            roll_size 50mb
            roll_keep 5
        }
        format json
    }
    reverse_proxy 127.0.0.1:3001
}

vault.inou.com {
    log {
        output file /var/log/caddy/vault.log {
            roll_size 50mb
            roll_keep 5
        }
        format json
    }
    reverse_proxy 127.0.0.1:8080
}

mail.inou.com {
    reverse_proxy 127.0.0.1:8880
}

mail.jongsma.me {
    reverse_proxy 127.0.0.1:8880
}

harryhaasjes.nl, www.harryhaasjes.nl {
    root * /var/www/harryhaasjes/public
    file_server
    encode gzip
}

stpetersburgaquatics.com, www.stpetersburgaquatics.com {
    root * /var/www/stpetersburgaquatics/public
    file_server
    encode gzip
}