{
	# Global ACME settings
	email admin@manko.yoga
	servers {
		trusted_proxies static private_ranges
	}
}

voip.manko.yoga {
	# TLS via Cloudflare DNS-01 challenge
	tls {
		dns cloudflare {$CF_API_TOKEN}
	}

	# Audio bridge WebSocket (wzp-web)
	# /audio/ws/* → wzp-web:8080/ws/*
	handle_path /audio/* {
		reverse_proxy wzp-web:8080
	}

	# Everything else → featherChat server
	# Web UI (/), API (/v1/*), WebSocket (/v1/ws/*)
	reverse_proxy warzone-server:7700 {
		header_up X-Real-IP {remote_host}
	}
}