{
	auto_https off
}

:8788 {
	basic_auth {
		{$STRONK_MASK_ADMIN_USER} {$STRONK_MASK_ADMIN_PASSWORD_HASH}
	}

	@unsafe_debug path /api/debug /api/debug/*

	handle @unsafe_debug {
		reverse_proxy {$STRONK_MASK_DEBUG_PROXY_UPSTREAM} {
			header_up X-Stronk-Admin-User {http.auth.user.id}
			header_up X-Stronk-Admin-Roles operator
			header_up X-Stronk-Admin-Proxy-Secret {$STRONK_MASK_ADMIN_PROXY_SECRET}
			header_up X-Stronk-Unsafe-Debug-Gateway {$STRONK_MASK_UNSAFE_DEBUG_GATEWAY_SECRET}
		}
	}

	handle {
		reverse_proxy {$STRONK_MASK_ADMIN_UPSTREAM} {
			header_up X-Stronk-Admin-User {http.auth.user.id}
			header_up X-Stronk-Admin-Roles operator
			header_up X-Stronk-Admin-Proxy-Secret {$STRONK_MASK_ADMIN_PROXY_SECRET}
		}
	}
}
