andymal.com, www.andymal.com {
    root * /srv/web
    file_server
    encode gzip
    header {
        Strict-Transport-Security "max-age=31536000"
        X-Content-Type-Options nosniff
        Referrer-Policy strict-origin-when-cross-origin
    }
}

api.andymal.com {
    reverse_proxy api:8080
    request_body {
        max_size 64MB
    }
    encode gzip
}
