# Add this site only to an existing Caddy. Replace BASIC_AUTH_HASH with `caddy hash-password` output.
random.ochenstarik.ru {
    tls {
        issuer acme {
            disable_tlsalpn_challenge
        }
    }
    basic_auth {
        owner BASIC_AUTH_HASH
    }
    request_body {
        max_size 1MB
    }
    # No access log: OAuth callback query values are sensitive.
    reverse_proxy 10.77.0.3:3100 {
        header_up Host random.ochenstarik.ru
        header_up X-Forwarded-Host random.ochenstarik.ru
        header_up X-Forwarded-Proto https
        header_up X-Forwarded-For {remote_host}
        header_up -X-Real-IP
        header_up -Forwarded
        header_up -CF-Connecting-IP
        header_up -Authorization
        transport http {
            dial_timeout 10s
            response_header_timeout 120s
        }
    }
}