# SITE_ADDRESS comes from .env:
#   crm.yourchurch.org  -> Caddy fetches a free HTTPS certificate automatically
#   :80                 -> plain HTTP on the server's IP address (testing only)
{$SITE_ADDRESS} {
	encode zstd gzip

	header {
		-Server
		X-Content-Type-Options nosniff
		Referrer-Policy same-origin
		Permissions-Policy "camera=(), microphone=(), geolocation=()"
	}

	reverse_proxy web:8000

	log {
		output stdout
		format console
	}
}
