netig.net {
    encode zstd gzip

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains"
        X-Content-Type-Options "nosniff"
        X-Frame-Options "DENY"
        Referrer-Policy "strict-origin-when-cross-origin"
        Permissions-Policy "camera=(), microphone=(), geolocation=()"
        Content-Security-Policy "default-src 'self'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; font-src 'self'; form-action 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'"
    }

    handle /contact/send {
        reverse_proxy 127.0.0.1:9007
    }

    handle {
        reverse_proxy 127.0.0.1:8000
    }
}

https://lescarnetsdakkadien.netig.net {
	# enable HSTS
	header Strict-Transport-Security max-age=31536000;
	# disable clients from sniffing the media type
	header X-Content-Type-Options nosniff
	# clickjacking protection
	header X-Frame-Options DENY

	reverse_proxy localhost:8002
}

https://www.lachaussettedelocquirec.fr {
	header Strict-Transport-Security max-age=31536000;
	reverse_proxy localhost:8003
}