# On EC2 the app answers on the instance's private DNS name with a certificate Caddy signs itself.
# Browsers warn once; the README says how to trust it or to put your own certificate in place.
{$APP_DOMAIN} {
    tls internal
    encode zstd gzip
    reverse_proxy web:8080
}
