{
        email chris@zerafa.com
}

edge01.zerafa.com {
        root * /srv
        encode zstd gzip
        file_server

        header {
                Strict-Transport-Security "max-age=31536000; includeSubDomains"
                X-Content-Type-Options "nosniff"
                X-Frame-Options "DENY"
                Referrer-Policy "strict-origin-when-cross-origin"
                -Server
        }
}

git.zerafa.com {
        reverse_proxy gitea:3000
}

portainer.zerafa.com {
        reverse_proxy portainer:9000
}

voyager.zerafa.com {
        root * /srv/voyager
        encode zstd gzip
        file_server

        header {
                Strict-Transport-Security "max-age=31536000; includeSubDomains"
                X-Content-Type-Options "nosniff"
                X-Frame-Options "DENY"
                Referrer-Policy "strict-origin-when-cross-origin"
                -Server
        }
}

mx.zerafa.com {
        respond "Zerafa Mail Gateway" 200

        header {
                Strict-Transport-Security "max-age=31536000"
                X-Content-Type-Options "nosniff"
                X-Frame-Options "DENY"
                -Server
        }
}

rspamd.zerafa.com {
        reverse_proxy rspamd:11334

        header {
                Strict-Transport-Security "max-age=31536000"
                X-Content-Type-Options "nosniff"
                X-Frame-Options "SAMEORIGIN"
                Referrer-Policy "strict-origin-when-cross-origin"
                -Server
        }
}

adsb.zerafa.com {
    reverse_proxy 192.168.161.31:8080
}
