{
  email {$TLS_EMAIL}
}

{$GITEA_DOMAIN} {
  encode zstd gzip
  reverse_proxy gitea:3000

  header {
    Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
    X-Content-Type-Options "nosniff"
    X-Frame-Options "SAMEORIGIN"
    Referrer-Policy "strict-origin-when-cross-origin"
  }
}

:80 {
  redir https://{$GITEA_DOMAIN}{uri} permanent
}