{
    on_demand_tls {
        ask http://127.0.0.1:3000/tls-check
    }
}

blueat.net, certifiedshitposter.com, good-example.com, mbdio.uk, rose.madebydanny.uk {
    @root {
        path /
    }

    #simple redirects for quick links

    redir @root https://about.blueat.net 301
    redir /tos https://about.blueat.net/legal#table_of_content_heading_1_1 301
    redir /privacy https://about.blueat.net/legal#table_of_content_heading_1_2 301
    redir /contact mailto:contact@mbdio.uk 301
    redir /fund https://signup.upcloud.com/?promo=77VFQE 301
    redir /tweets2bsky https://about.blueat.net/tweets-2-bsky 301

    # handle /favicon.ico

    handle /favicon.ico {
        rewrite * /xrpc/com.atproto.sync.getBlob?did=did:plc:l37td5yhxl2irrzrgvei4qay&cid=bafkreiclaqiuqolxaxijjpxcbzbogirfkpzvetlvqmqudr3sdwja6yiska
        reverse_proxy http://127.0.0.1:3000
    }

    handle /status {
        root * /config
        rewrite * /status.html
        file_server
    }
    # PDS Gatekeeper config 
    @gatekeeper {
        path /xrpc/com.atproto.server.getSession
        path /xrpc/com.atproto.server.describeServer
        path /xrpc/com.atproto.server.updateEmail
        path /xrpc/com.atproto.server.createSession
        path /xrpc/com.atproto.server.createAccount
        path /@atproto/oauth-provider/~api/sign-in
        path /gate/*
    }
    
    handle @gatekeeper {
        reverse_proxy http://127.0.0.1:8080
    }
    
    reverse_proxy http://127.0.0.1:3000
}

*.blueat.net, *.mbdio.uk, *.certifiedshitposter.com, *.good-example.com {
    tls {
        on_demand
    }
    
    handle /favicon.ico {
        rewrite * /xrpc/com.atproto.sync.getBlob?did=did:plc:l37td5yhxl2irrzrgvei4qay&cid=bafkreidglwvmxv6ue2lhljbgdip6bdbzbswaopjauty2e7tp3muglf55w4
        reverse_proxy http://127.0.0.1:3000
    }

    @gatekeeper {
        path /xrpc/com.atproto.server.getSession
        path /xrpc/com.atproto.server.describeServer
        path /xrpc/com.atproto.server.updateEmail
        path /xrpc/com.atproto.server.createSession
        path /xrpc/com.atproto.server.createAccount
        path /@atproto/oauth-provider/~api/sign-in
        path /gate/*
    }
    
    handle @gatekeeper {
        reverse_proxy http://127.0.0.1:8080
    }
    
    reverse_proxy http://127.0.0.1:3000
}