:80 {
	encode gzip

	# Health diretto (opzionale)
	handle /up {
		reverse_proxy web:3000
	}

	handle {
		# Conserva lo schema originale dal proxy esterno (NPM → HTTPS).
		reverse_proxy web:3000 {
			header_up X-Forwarded-Proto {http.request.header.X-Forwarded-Proto}
			header_up X-Forwarded-Host {http.request.header.X-Forwarded-Host}
			header_up X-Forwarded-For {http.request.header.X-Forwarded-For}
		}
	}

	log {
		output stdout
		format console
	}
}
