{$BASE_APP_URL:http://localhost} {
    encode zstd gzip

    header {
        X-Content-Type-Options nosniff
        Referrer-Policy no-referrer
        Permissions-Policy "camera=(), microphone=(), geolocation=()"
    }

    handle_path /app* {
        reverse_proxy app:8000
    }

    handle /api/* {
        reverse_proxy app:8000
    }

    handle {
        redir * /app/ 308
    }
}