# Automatic HTTPS (ACME) needs public DNS for $COVE_DOMAIN and ports 80/443.
# For local evaluation set COVE_DOMAIN=localhost and uncomment `tls internal`.
{$COVE_DOMAIN} {
	# tls internal
	encode zstd gzip
	request_body {
		max_size 32MB
	}
	header {
		X-Frame-Options SAMEORIGIN
		X-Content-Type-Options nosniff
		Referrer-Policy no-referrer
	}
	reverse_proxy cove:{$COVE_BIND_PORT:8300}
}
