{
	admin off
}

(authelia) {
	forward_auth authelia:9091 {
		uri /api/authz/forward-auth
		copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
	}
}

auth.{$BASE_DOMAIN:tdwiki.home.arpa} {
	tls internal
	encode zstd gzip
	reverse_proxy authelia:9091
}

wiki.{$BASE_DOMAIN:tdwiki.home.arpa} {
	tls internal
	encode zstd gzip
	import authelia

	header {
		X-Content-Type-Options nosniff
		Referrer-Policy same-origin
	}

	reverse_proxy tiddlywiki:8080
}

dav.{$BASE_DOMAIN:tdwiki.home.arpa} {
	tls internal
	import authelia

	header {
		X-Content-Type-Options nosniff
	}

	route {
		webdav {
			root /srv/files
		}
	}
}