# Optional TLS front (compose profile "tls"): Caddy gets and renews the certificate for $DOMAIN by itself.
# Geolocation, the service worker and "install app" all require HTTPS outside localhost.
{$DOMAIN} {
    reverse_proxy app:80
}