# SMUL server 
{
	admin off
	skip_install_trust
}

{$SMUL_DOMAIN} {
	tls {$SMUL_TLS}
	header {
		# 0 for self-signed/internal CA: HSTS would remove the browser's "proceed anyway"
		Strict-Transport-Security "max-age={$SMUL_HSTS_MAX_AGE:31536000}"
		-Server
	}
	reverse_proxy nginx:80 {
		header_up X-Smul-Proto https
	}
}
