(compression_config) {
  gzip
}

(base_config) {
  tls {
    dns cloudflare
    clients /etc/ssl/caddy/cloudflare-origin-pull-ca.pem
    protocols tls1.2
  }
  header / {
    Content-Security-Policy "
      base-uri 'none';
      connect-src 'self' 'commento.msfjarvis.dev';
      default-src 'none';
      frame-ancestors 'none';
      form-action 'self';
      font-src 'self' data: 'fonts.gstatic.com' 'commento.msfjarvis.dev';
      img-src data: 'self' 'gfycat.com' 'imgur.com' '*.imgur.com' 'commento.msfjarvis.dev';
      object-src 'none';
      script-src 'self' 'commento.msfjarvis.dev' 'nonce-a14078dd77014eac4958fccb6008dd4f987ce29d12a215aabeef383c58429916';
      style-src 'self' 'fonts.googleapis.com' 'commento.msfjarvis.dev';
    "
    # Security related changes stolen from https://github.com/searx/searx-docker/blob/master/Caddyfile
    Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
    X-XSS-Protection "1; mode=block"
    X-Frame-Options "SAMEORIGIN"
    Feature-Policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';sync-xhr 'none';usb 'none';vr 'none'"
    Referrer-Policy "no-referrer"
  }
}

(proxy_config) {
  try_duration 5s
  transparent
}

https://www.msfjarvis.dev {
  import base_config
  redir https://msfjarvis.dev{uri} 301
}

https://msfjarvis.dev {
  import base_config
  import compression_config
  root /var/www/msfjarvis.dev/
  log / /etc/logs/requests.log
  errors {
    404 404.html
  }
  redir 301 {
    /caesium-stable https://dl.msfjarvis.dev/caesium/wahoo/stable/updater.json
    /caesium-beta https://dl.msfjarvis.dev/caesium/wahoo/beta/updater.json
    /caesium-alpha https://dl.msfjarvis.dev/caesium/wahoo/alpha/updater.json
  }
}

https://acra.msfjarvis.dev {
  import base_config
  import compression_config
  proxy / http://localhost:8080 {
    import proxy_config
  }
}

https://bin.msfjarvis.dev {
  import base_config
  import compression_config
  proxy / http://localhost:8082 {
    import proxy_config
  }
  header / {
    -Content-Security-Policy
  }
}

https://commento.msfjarvis.dev {
  import base_config
  import compression_config
  proxy / http://localhost:8081 {
    import proxy_config
  }
}

https://dl.msfjarvis.dev {
  import base_config
  root /var/www/dl.msfjarvis.dev
  fastcgi / /run/php/php7.2-fpm.sock php
  rewrite {
    if {path} ends_with /
    to {dir}/index.html {dir}/index.php /_h5ai/public/index.php
  }
}

https://mc.msfjarvis.dev {
  import base_config
  import compression_config
  root /var/www/mc.msfjarvis.dev/
  header / {
    -Content-Security-Policy
  }
}

https://rss.msfjarvis.dev {
  import base_config
  import compression_config
  proxy / http://localhost:8083 {
    import proxy_config
  }
  header / {
    -Content-Security-Policy
  }
}

https://staging.msfjarvis.dev {
  import base_config
  import compression_config
  root /var/www/staging.msfjarvis.dev/
  errors {
    404 404.html
  }
}