{
    admin off
}

{{ services.nextcloud.domain }} {
    tls {{ secrets.tls_email }}

    rewrite /.well-known/caldav /remote.php/dav
    rewrite /.well-known/carddav /remote.php/dav

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        -Server
    }

    reverse_proxy nextcloud:80
}

{{ services.emby.domain }} {
    tls {{ secrets.tls_email }}

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        -Server
    }

    reverse_proxy emby:8096
}

{{ services.monerod.domain }}:18089 {
    tls {{ secrets.tls_email }}

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        -Server
    }

    reverse_proxy monerod:18089
}