{
	auto_https off
}

http://{$AUTH_DOMAIN:auth.local.nodedc} {
	@auth_admin path /if/admin /if/admin/*
	redir @auth_admin http://{$AUTH_ADMIN_DOMAIN:auth-admin.local.nodedc}{uri} 302

	@auth_root path /
	redir @auth_root http://{$LAUNCHER_DOMAIN:launcher.local.nodedc}/ 302

	@auth_user_dashboard path /if/user /if/user/*
	redir @auth_user_dashboard http://{$LAUNCHER_DOMAIN:launcher.local.nodedc}/ 302

	reverse_proxy authentik-server:9000 {
		header_up Host {host}
		header_up X-Forwarded-Proto {scheme}
		header_up X-Forwarded-For {remote_host}
	}
}

http://{$AUTH_ADMIN_DOMAIN:auth-admin.local.nodedc} {
	@admin_root path /
	redir @admin_root /if/admin/ 302

	reverse_proxy authentik-server:9000 {
		header_up Host {host}
		header_up X-Forwarded-Proto {scheme}
		header_up X-Forwarded-For {remote_host}
	}
}

http://{$LAUNCHER_DOMAIN:launcher.local.nodedc} {
	reverse_proxy {$LOCAL_LAUNCHER_UPSTREAM:host.docker.internal:5173} {
		header_up Host localhost:5173
		header_up X-Forwarded-Proto {scheme}
		header_up X-Forwarded-For {remote_host}
	}
}

http://{$TASK_DOMAIN:task.local.nodedc} {
	reverse_proxy {$LOCAL_TASK_MANAGER_UPSTREAM:host.docker.internal:8090} {
		header_up Host {host}
		header_up X-Forwarded-Proto {scheme}
		header_up X-Forwarded-For {remote_host}
	}
}

http://{$BIM_DOMAIN:bim.local.nodedc} {
	reverse_proxy {$LOCAL_BIM_VIEWER_UPSTREAM:host.docker.internal:8080} {
		header_up Host {host}
		header_up X-Forwarded-Proto {scheme}
		header_up X-Forwarded-For {remote_host}
	}
}
