{
    # Debug: enable request logging
    admin off
}

# Catch-all: Synology forwards decrypted HTTP traffic to this port.
# Route based on path regardless of Host header.
:8080 {
    @api path /api/*
    handle @api {
        reverse_proxy api:3001 {
            header_down -Origin
        }
    }
    handle {
        reverse_proxy frontend:3000
    }
}