# 9030 cryptpad — allocated 2026-09-08
# Merge: scripts/caddy/caddy-apply.sh --site cryptpad.hacktivism.ch --port 9030 --label cryptpad
# Backend is koopa-cryptpad-edge (HTTP+WS). Sandbox subdomain (cryptpad-ui) — wire after first boot.
cryptpad.hacktivism.ch {
	header Alt-Svc "clear"
	reverse_proxy 127.0.0.1:9030 {
		header_up Host {host}
		header_up X-Forwarded-For {remote_host}
		header_up X-Forwarded-Host {host}
		header_up X-Forwarded-Proto {scheme}
		header_up X-Forwarded-Port 443
		flush_interval -1
		transport http {
			read_timeout 3600s
			write_timeout 3600s
		}
	}
}