# Serves the customer's network only. Put the certificate their browsers trust in ./certs (app.pem and
# app-key.pem, office.pem and office-key.pem), or replace each tls line with `tls internal` to use
# Caddy's own authority and trust it on staff machines.

{$APP_DOMAIN} {
    tls /certs/app.pem /certs/app-key.pem
    encode zstd gzip
    reverse_proxy web:8080
}

{$OFFICE_DOMAIN} {
    tls /certs/office.pem /certs/office-key.pem
    reverse_proxy documentserver:80
}
