# Global options
{
        #acme_dns duckdns 22ef93f5-4605-4328-b7cf-54b40f2440a3
        acme_dns duckdns {env.DUCKDNS_TOKEN}
}

hrwz.duckdns.org {
        reverse_proxy http://192.168.1.205:11000
}

office.hrwz.duckdns.org {
        reverse_proxy http://192.168.1.205:9981
}

resheff.duckdns.org, *.resheff.duckdns.org {
        # Terminate TLS using DNS-01 challenge via DuckDNS
        tls {
                dns duckdns {env.DUCKDNS_TOKEN}
        }

        # Specific rules for draw.resheff.duckdns.org
        @draw host draw.resheff.duckdns.org
        handle @draw {
                handle /storage/* {
                        reverse_proxy http://192.168.1.220:9014 {
                                header_up Host {host}
                                header_up X-Real-IP {remote}
                        }
                }

                handle /socket.io/* {
                        reverse_proxy http://192.168.1.220:9015 {
                                header_up Host {host}
                                header_up X-Real-IP {remote}
                                header_up Upgrade {http.request.header.Upgrade}
                                header_up Connection {http.request.header.Connection}
                        }
                }
        }

        # New proxy for stash.resheff.duckdns.org
        @stash host stash.resheff.duckdns.org
        handle @stash {
                reverse_proxy galaxy.lan:9999 {
                        header_up Host {host}
                        header_up X-Real-IP {remote_host}
                        header_up X-Forwarded-Port {server_port}
                }
        }

        # Proxy all other traffic to galaxy.lan
        handle {
                reverse_proxy http://galaxy.lan
                #reverse_proxy http://galaxy.lan {
                #       header_up Host {http.request.host}
                #       header_up X-Real-IP {remote}
                #       header_up X-Forwarded-For {remote}
                #       header_up X-Forwarded-Port {server.listen.port}
                #       header_up X-Forwarded-Proto {scheme}
                #}
        }
}