# Sección para Caddy
# Nota: 10.0.0.1 es la IP de tu servidor, donde tienes instalado Netbird.
# -------------------------------------------
# NetBird - Sitio principal
# -------------------------------------------
netbird.example.com {

	# -------------------------------------------
	# Servicios reverse proxy
	# -------------------------------------------

	# Signal Service (gRPC)
	reverse_proxy /signalexchange.SignalExchange/* h2c://10.0.0.1:4333

	# Management API (REST)
	reverse_proxy /api/* 10.0.0.1:4430
	
	#Relay
	reverse_proxy /relay/* {
	  transport http {
	    versions h2c
	  }
          to 10.0.0.1:33080
    }

	# Management API (gRPC)
	reverse_proxy /management.ManagementService/* h2c://10.0.0.1:4430

	# Dashboard Web UI (catch-all)
	reverse_proxy /* 10.0.0.1:8086

	# -------------------------------------------
	# Cabeceras de seguridad
	# -------------------------------------------
	header * {
		Strict-Transport-Security "max-age=3600; includeSubDomains; preload"
		X-Content-Type-Options "nosniff"
		X-Frame-Options "DENY"
		X-XSS-Protection "1; mode=block"
		-Server
		Referrer-Policy strict-origin-when-cross-origin
	}
}
