{
  email {$CADDY_EMAIL}
  http_port {$CADDY_HTTP_PORT}
  https_port {$CADDY_HTTPS_PORT}
}

{$NEXTCLOUD_DOMAIN} {
  {$CADDY_TLS}
  encode zstd gzip
  reverse_proxy app:80
}

{$BROKER_DOMAIN} {
  {$CADDY_TLS}
  encode zstd gzip
  @brokerInternalApiNoToken {
    path /api/*
    not header X-Broker-Internal-Token *
  }
  respond @brokerInternalApiNoToken 403
  reverse_proxy broker:3000
}