{
	admin localhost:2019
}

# --- Сниппеты ---
(hsts) {
	header {
		Strict-Transport-Security "max-age=15552000; includeSubDomains; preload"
	}
}

(enc) {
	encode gzip zstd
}

(proxy-common) {
	header_up Host {host}
	header_up X-Forwarded-Proto {scheme}
}

# --- Сайты ---
s3.g4st3r.ru {
	reverse_proxy 10.8.0.2:9000 {
		import proxy-common
	}
	import hsts
	import enc
}

minio.g4st3r.ru {
	reverse_proxy 10.8.0.2:9110 {
		import proxy-common
	}
	import hsts
	import enc
}

cloud.g4st3r.ru {
	reverse_proxy 10.8.0.2:80 {
		import proxy-common
	}
	import hsts
	import enc
}

grafana.g4st3r.ru {
	reverse_proxy 10.8.0.2:3000 {
		import proxy-common
	}
	import hsts
	import enc
}

prometheus.g4st3r.ru {
	reverse_proxy 10.8.0.2:9090 {
		import proxy-common
	}
	import hsts
	import enc
}

alert.g4st3r.ru {
	reverse_proxy 10.8.0.2:9093 {
		import proxy-common
	}
	import hsts
	import enc
}

photos.g4st3r.ru {
	reverse_proxy 10.8.0.2:2283 {
		import proxy-common
		header_up X-Real-IP {remote}
	}
	# Immich не поддерживает subpath — только корень домена/поддомена
	request_body {
		max_size 50000MB
	}
	import hsts
	import enc
}

home.g4st3r.ru {
	reverse_proxy 10.8.0.2:8123 {
		import proxy-common
	}
	import hsts
	import enc
}

gitlab.g4st3r.ru {
	reverse_proxy 10.8.0.2:9443 {
		transport http {
			tls_insecure_skip_verify
		}
		import proxy-common
	}
}

openclaw.g4st3r.ru {
	reverse_proxy 10.8.0.2:18789 {
		import proxy-common
		header_up Authorization "Bearer {env.OPENCLAW_GATEWAY_TOKEN}"
	}
}

git.g4st3r.ru {
	reverse_proxy 10.8.0.2:2222 {
		import proxy-common
	}
	tls aporyadin003@gmail.com
}

bw.g4st3r.ru {
	reverse_proxy 10.8.0.2:8087 {
		import proxy-common
	}
}