{
	admin off
	auto_https off
}

:80 {
	encode zstd gzip

	header {
		X-Content-Type-Options "nosniff"
		X-Frame-Options "DENY"
		Referrer-Policy "strict-origin-when-cross-origin"
		Permissions-Policy "camera=(), microphone=(), geolocation=()"
		Cross-Origin-Opener-Policy "same-origin"
		Cross-Origin-Resource-Policy "same-origin"
		-Server
		-X-Powered-By
	}

	handle /v1/* {
		reverse_proxy gateway-api:8000 {
			flush_interval -1
		}
	}

	handle /healthz {
		reverse_proxy gateway-api:8000
	}

	handle /readyz {
		reverse_proxy gateway-api:8000
	}

	handle {
		reverse_proxy frontend:3000
	}
}
