{
	auto_https off
}

http://{$AUTH_DOMAIN} {
	@auth_root path /
	redir @auth_root http://{$LAUNCHER_DOMAIN}:{$NODEDC_PUBLIC_HTTP_PORT}/ 302

	@auth_user_dashboard path /if/user /if/user/*
	redir @auth_user_dashboard http://{$LAUNCHER_DOMAIN}:{$NODEDC_PUBLIC_HTTP_PORT}/ 302

	reverse_proxy authentik-server:9000 {
		header_up Host {http.request.host}
		header_up X-Forwarded-Proto {scheme}
		header_up X-Forwarded-For {remote_host}
	}
}

http://{$LAUNCHER_DOMAIN} {
	reverse_proxy launcher:5173 {
		header_up Host {http.request.host}
		header_up X-Forwarded-Proto {scheme}
		header_up X-Forwarded-For {remote_host}
	}
}

http://{$TASK_DOMAIN} {
	reverse_proxy {$SYNOLOGY_TASK_MANAGER_UPSTREAM} {
		header_up Host {http.request.host}
		header_up X-Forwarded-Host {http.request.host}
		header_up X-Forwarded-Proto {scheme}
		header_up X-Forwarded-Port {$NODEDC_PUBLIC_HTTP_PORT}
		header_up X-Forwarded-For {remote_host}
	}
}

http://id.nodedc.ru {
	@auth_root path /
	redir @auth_root https://hub.nodedc.ru/ 302

	@auth_user_dashboard path /if/user /if/user/*
	redir @auth_user_dashboard https://hub.nodedc.ru/ 302

	reverse_proxy authentik-server:9000 {
		header_up Host id.nodedc.ru
		header_up X-Forwarded-Host id.nodedc.ru
		header_up X-Forwarded-Proto https
		header_up X-Forwarded-Port 443
		header_up X-Forwarded-For {remote_host}
	}
}

http://hub.nodedc.ru {
	reverse_proxy launcher:5173 {
		header_up Host hub.nodedc.ru
		header_up X-Forwarded-Host hub.nodedc.ru
		header_up X-Forwarded-Proto https
		header_up X-Forwarded-Port 443
		header_up X-Forwarded-For {remote_host}
	}
}

http://ops.nodedc.ru {
	reverse_proxy {$SYNOLOGY_TASK_MANAGER_UPSTREAM} {
		header_up Host ops.nodedc.ru
		header_up X-Forwarded-Host ops.nodedc.ru
		header_up X-Forwarded-Proto https
		header_up X-Forwarded-Port 443
		header_up X-Forwarded-For {remote_host}
	}
}