# Devigo Website - Reverse Proxy to Containerized Site
# Generated by Ansible - DO NOT EDIT MANUALLY

# Redirect www to apex (apex is primary per user preference)
{{ devigo_www_domain }} {
    redir https://{{ devigo_domain }}{uri} permanent
}

# Primary domain (apex)
{{ devigo_domain }} {
    reverse_proxy localhost:9080
    
    # Security headers
    header {
        X-Frame-Options SAMEORIGIN
        X-Content-Type-Options nosniff
        X-XSS-Protection "1; mode=block"
        Referrer-Policy strict-origin-when-cross-origin
        Permissions-Policy "geolocation=(), microphone=(), camera=()"
    }
    
    # Logging
    log {
        output file /var/log/caddy/devigo.log {
            roll_size 100mb
            roll_keep 5
        }
        format json {
            time_format "2006-01-02T15:04:05.000Z07:00"
        }
        level INFO
    }
}