{
	auto_https off
}

http://{$CMS_DOMAIN:cms.local.nodedc} {
	reverse_proxy cms-app:8090 {
		header_up Host {host}
		header_up X-Forwarded-Proto {$CMS_EXTERNAL_SCHEME:http}
		header_up X-Forwarded-For {remote_host}
	}
}

http://{$CMS_AUTH_DOMAIN:cms-auth.local.nodedc} {
	@auth_admin path /if/admin /if/admin/*
	redir @auth_admin {$CMS_AUTH_ADMIN_PUBLIC_URL}{uri} 302

	@auth_root path /
	redir @auth_root {$CMS_PUBLIC_URL}/ 302

	@auth_user_dashboard path /if/user /if/user/*
	redir @auth_user_dashboard {$CMS_PUBLIC_URL}/ 302

	reverse_proxy authentik-server:9000 {
		header_up Host {host}
		header_up X-Forwarded-Proto {$CMS_EXTERNAL_SCHEME:http}
		header_up X-Forwarded-For {remote_host}
	}
}

http://{$CMS_AUTH_ADMIN_DOMAIN:cms-auth-admin.local.nodedc} {
	@admin_root path /
	redir @admin_root /if/admin/ 302

	reverse_proxy authentik-server:9000 {
		header_up Host {host}
		header_up X-Forwarded-Proto {$CMS_EXTERNAL_SCHEME:http}
		header_up X-Forwarded-For {remote_host}
	}
}