http://{$DOMAIN} {
	import snippets/Logging

	# ActivityPub Service
	import snippets/ActivityPub

	# Default proxy everything else to Ghost.
	# VPS Caddy terminates TLS; tell Ghost the original scheme was https
	# so it generates correct absolute URLs.
	handle {
		header_up X-Forwarded-Proto https
		reverse_proxy ghost:2368
	}

	# Optional: Enable gzip compression
	encode gzip

	# Optional: Add security headers
	import snippets/SecurityHeaders
}
