---

root_access:
  - ak
  - foobar
  - polyfloyd

acme_domains:
 - tickets.bitlair.nl

nginx_sites:
  - server_name: "tickets.bitlair.nl"
    config:
      - |-
        location / {
          proxy_pass http://127.0.0.1:3000/;
          proxy_http_version 1.1;
          proxy_set_header Connection "upgrade";
          proxy_set_header Upgrade $http_upgrade;
          proxy_set_header X-Forwarded-For $remote_addr;
          proxy_set_header X-Forwarded-Proto $scheme;

          # by default nginx times out connections in one minute
          proxy_read_timeout 1d;
        }

group_nft_input:
  - "tcp dport { http, https } accept # Allow web-traffic from world"