{
    # Global options
    auto_https off
}

:80 {
    # Serve static frontend files
    root * /srv
    file_server

    # Proxy API calls to backend Flask
    handle_path /api/* {
        reverse_proxy backend:8000
    }

    # Proxy OAuth routes
    handle_path /login {
        reverse_proxy backend:8000
    }

    handle_path /oauth/callback {
        reverse_proxy backend:8000
    }

    handle_path /health {
        reverse_proxy backend:8000
    }
}