# Global options — ACME email for Let's Encrypt notifications.
# Set ACME_EMAIL in .env; Caddy reads it via the environment substitution below.
{
    email {env.ACME_EMAIL}
}

rwcheck.khanlab.bio {
    reverse_proxy rwcheck:8000

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        X-Content-Type-Options    nosniff
        X-Frame-Options           DENY
        -Server
    }
}
