# Decap CMS OAuth2 Proxy
# Generated by Ansible - DO NOT EDIT MANUALLY

{{ devigo_oauth_domain }} {
    reverse_proxy 127.0.0.1:{{ devigo_oauth_container_port }}
    
    # Security headers
    header {
        X-Frame-Options DENY
        X-Content-Type-Options nosniff
        Referrer-Policy strict-origin-when-cross-origin
    }
    
    # Logging
    log {
        output file /var/log/caddy/devigo-decap-oauth.log {
            roll_size 100mb
            roll_keep 5
        }
        format json {
            time_format "2006-01-02T15:04:05.000Z07:00"
        }
        level INFO
    }
}