nohypeai.net, www.nohypeai.net {
  encode gzip zstd

  header {
    X-Content-Type-Options nosniff
    X-Frame-Options DENY
    Referrer-Policy strict-origin-when-cross-origin
    Permissions-Policy "geolocation=(), microphone=(), camera=()"
    X-Forwarded-Proto https
  }

  handle_path /static/* {
    root * /srv/sum/nohype/static
    file_server
  }

  handle_path /media/* {
    root * /srv/sum/nohype/media
    file_server
  }

  reverse_proxy localhost:8001
}