{$DOMAIN:panel.example.com} {
	encode gzip zstd

	# Healthcheck без редиректов наружу
	handle /health {
		reverse_proxy app:8080
	}

	reverse_proxy app:8080 {
		header_up X-Real-IP {remote_host}
		header_up X-Forwarded-For {remote_host}
		header_up X-Forwarded-Proto {scheme}
		header_up Host {host}
	}

	header {
		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
		X-Content-Type-Options nosniff
		X-Frame-Options DENY
		Referrer-Policy strict-origin-when-cross-origin
		-Server
	}

	log {
		output stdout
		format console
	}
}