{$RELAY_DOMAIN} {
    encode zstd gzip

    @matrix path /_matrix/* /.well-known/matrix/*
    handle @matrix {
        reverse_proxy tuwunel:6167
    }

    handle {
        reverse_proxy core:8080
    }

    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains"
        -Server
    }
}
