{$LINKER_CLOUD_DOMAIN} {
	encode zstd gzip
	reverse_proxy 127.0.0.1:8090

	header {
		Strict-Transport-Security "max-age=31536000; includeSubDomains"
		X-Content-Type-Options "nosniff"
		Referrer-Policy "no-referrer"
		Permissions-Policy "camera=(), microphone=(), geolocation=()"
		Content-Security-Policy "default-src 'none'; frame-ancestors 'none'"
	}

	log {
		output stdout
		format json
	}
}
