{
    email {$ACME_EMAIL}
    admin off
}

{$ZT_DEPLOY_DOMAIN} {
    encode zstd gzip
    header {
        X-Content-Type-Options "nosniff"
        X-Frame-Options "SAMEORIGIN"
        Referrer-Policy "strict-origin-when-cross-origin"
        Strict-Transport-Security "max-age=31536000; includeSubDomains"
        -Server
    }
    reverse_proxy web:8080 {
        health_uri /up
        health_interval 30s
        health_timeout 5s
    }
}
