alphacord.alphaserver.gr {
 encode zstd gzip
 header {
  X-Content-Type-Options nosniff
  Referrer-Policy strict-origin-when-cross-origin
  Strict-Transport-Security "max-age=31536000"
  X-Frame-Options DENY
  -Server
 }
 @private path /.git /.git/* /.env /.env.* /work/* /backups/* /node_modules/* /config.json /merchant.json /app.json
 handle @private {
  respond 404
 }
 @unsafeMethod method TRACE TRACK
 handle @unsafeMethod {
  respond 405
 }
 @sourceMaps path_regexp sourceMaps ^/(assets|static)/.*[.]map$
 handle @sourceMaps {
  respond 404
 }
 handle /billing-api/* {
  reverse_proxy 127.0.0.1:8090 {
   header_up X-Alphacord-Client-IP {remote_host}
   header_down -Server
  }
 }
 @plus path /plus /en/plus
 handle @plus {
  reverse_proxy 127.0.0.1:8090
 }
 @marketing path / /download /download/ /privacy /terms /source /style.css /interaction-policy.js /brand/* /releases/*
 handle @marketing {
  root * /var/www/alphacord
  @download path /download /download/
  rewrite @download /download.html
  @privacy path /privacy
  rewrite @privacy /privacy.html
  @terms path /terms
  rewrite @terms /terms.html
  @source path /source
  rewrite @source /source.html
  @binary path /releases/*.exe /releases/*.AppImage /releases/*.zip /releases/*.tar.gz
  header @binary Content-Type application/octet-stream
  header @binary Content-Disposition attachment
  @updateMetadata path /releases/updates/*.yml /releases/updates/SHA256SUMS.txt
  header @updateMetadata Cache-Control "no-store, max-age=0"
  header Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
  file_server
 }
 handle {
  reverse_proxy 127.0.0.1:8080 {
   header_down -Server
  }
 }
}
