lan.vbytes.se {
    reverse_proxy localhost:5000

    log {
        output file /var/log/caddy/access.log
    }

    encode gzip zstd

    header {
        Permissions-Policy interest-cohort=()
        Strict-Transport-Security max-age=31536000;
        X-Content-Type-Options nosniff
        X-Frame-Options DENY
        Referrer-Policy no-referrer-when-downgrade
    }
}