{
  email {$BRAIN5D_TLS_EMAIL}
}

{$BRAIN5D_DOMAIN} {
  encode zstd gzip

  basic_auth {
    {$BRAIN5D_AUTH_USER} {$BRAIN5D_AUTH_PASSWORD_HASH}
  }

  header {
    Strict-Transport-Security "max-age=31536000; includeSubDomains"
    X-Content-Type-Options "nosniff"
    X-Frame-Options "DENY"
    Referrer-Policy "no-referrer"
    -Server
  }

  reverse_proxy 127.0.0.1:8765
}