{
    admin off
}

{{ services.nextcloud.domain }} {
    tls {{ secrets.tls_email }}

    rewrite /.well-known/caldav /remote.php/dav
    rewrite /.well-known/carddav /remote.php/dav

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        -Server
    }

    reverse_proxy nextcloud:80
}

{{ services.emby.domain }} {
    tls {{ secrets.tls_email }}

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        -Server
    }

    reverse_proxy emby:8096
}

{{ services.ipfs.domain }},  *.ipfs.{{ services.ipfs.domain }}, *.ipns.{{ services.ipfs.domain }} {
    tls {{ secrets.tls_email }} {
        dns njalla {{ secrets.caddy.njalla_api_token }}
    }

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        -Server
    }

    reverse_proxy ipfs_kubo:8080
}

{{ services.monerod.domain }}:18089 {
    tls {{ secrets.tls_email }}

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        -Server
    }

    reverse_proxy monerod:18089
}