{
 admin off
 auto_https off
 persist_config off
}
:8080 {
 header {
  -Server
  X-Content-Type-Options nosniff
  X-Frame-Options DENY
  Referrer-Policy no-referrer
  Permissions-Policy "camera=(), microphone=(), geolocation=()"
  Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self'; img-src 'self'; connect-src 'self'; base-uri 'none'; frame-ancestors 'none'; form-action 'none'"
 }
 @native path /cosmick/v1/accounts/register /cosmick/v1/accounts/login /cosmick/v1/accounts/session /cosmick/v1/vault
 handle @native {
  request_body {
   max_size 9MB
  }
  header Cache-Control no-store
  reverse_proxy cosmick-password-api:8080 {
   header_up -X-Authentik-Username
   header_up -X-Authentik-Email
   header_up -X-Authentik-Groups
  }
 }
 handle /healthz {
  reverse_proxy cosmick-password-api:8080 {
   rewrite /alive
  }
 }
 @private path /api/* /identity/* /admin* /vw_static/* /notifications/* /icons/* /cosmick/*
 handle @private {
  respond "Cosmick Password: recurso no disponible" 404
 }
 handle {
  root * /srv
  header Cache-Control "public, max-age=300"
  file_server
 }
}
