updates.example.com {
	encode gzip zstd

	request_body {
		max_size 1GB
	}

	# Optional: restrict the admin UI to VPN or office IP ranges.
	# @admin path /admin /admin/*
	# handle @admin {
	# 	@blocked not remote_ip 10.0.0.0/8 192.168.0.0/16 100.64.0.0/10
	# 	respond @blocked "admin access denied" 403
	# 	reverse_proxy 127.0.0.1:8080
	# }

	reverse_proxy 127.0.0.1:8080 {
		header_up Host {host}
		header_up X-Forwarded-For {remote_host}
		header_up X-Forwarded-Host {host}
		header_up X-Forwarded-Proto {scheme}
	}
}