{
	auto_https off
}

:80 {
	# Embedded IdP OAuth2/OIDC endpoints
	handle /oauth2/* {
		reverse_proxy netbird-kunde{{ customer_id }}-management:80
	}

	# NetBird Management API + gRPC
	handle /api/* {
		reverse_proxy netbird-kunde{{ customer_id }}-management:80
	}
	handle /management.ManagementService/* {
		reverse_proxy netbird-kunde{{ customer_id }}-management:80 {
			transport http {
				versions h2c
			}
		}
	}

	# NetBird Signal gRPC
	handle /signalexchange.SignalExchange/* {
		reverse_proxy netbird-kunde{{ customer_id }}-signal:80 {
			transport http {
				versions h2c
			}
		}
	}

	# Default: NetBird Dashboard
	handle {
		reverse_proxy netbird-kunde{{ customer_id }}-dashboard:80
	}
}