{
	admin off
	persist_config off
	auto_https off
	import globals/*
	servers :80 {
		metrics
		protocols h1 h2c
		trusted_proxies static private_ranges
	}
	servers :9091 {
		protocols h1
	}
}

:9091 {
	metrics
}

http://,
http://alanpearce.uk,
http://www.alanpearce.uk,
http://www.alanpearce.eu {
	header {
		Cache-Control max-age=31536000
		X-Content-Type-Options nosniff
		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
		Content-Security-Policy "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'none'; style-src 'unsafe-inline'"
	}
	redir https://alanpearce.eu{uri} permanent
}

http://aln.pe {
	header {
		Cache-Control max-age=86400
		X-Content-Type-Options nosniff
		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
		Content-Security-Policy "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'none'; style-src 'unsafe-inline'"
	}

	redir /pronouns https://en.pronouns.page/@alanpearce
	redir /pronomen https://de.pronouns.page/@alanpearce
	redir /git https://git.alanpearce.eu
	redir /gpg https://alanpearce.eu/public_key.asc
	redir /status https://stats.uptimerobot.com/GgzRkHBDr7
	redir /* https://alanpearce.eu/{uri}
}

http://alanpearce.eu {
	root * {$SITE_ROOT}
	file_server {
		precompressed br zstd gzip
	}
	header {
		Cache-Control max-age=14400
		X-Content-Type-Options nosniff
		Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
		Content-Security-Policy "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'none'; style-src 'unsafe-inline'; form-action 'none'; base-uri 'self'"
	}
	handle_errors {
		@404 expression `{err.status_code} == 404`
		handle @404 {
			rewrite * /404.html
		}
		file_server {
			precompressed br zstd gzip
		}
	}
	header /feed-styles/ Content-Type text/xsl
	error /feed-styles/index.html* 404
	respond /favicon.ico 204
	redir /index.xml /atom.xml
	redir /post/index.xml /atom.xml

	@http header X-Forwarded-Proto http
	redir @http https://alanpearce.eu{uri}
}