# Internal vhost — served only behind the supramundane front proxy.
# Public domain, TLS, and privacy headers are handled by the front
# (see sites/dasl-ing.caddy on the front, generated by `sm deploy`).
#
# The content is NOT baked into the image: it lives in the service's shared
# data directory (mounted at /data), which CI rsyncs into on every push to
# main (see ../.tangled/workflows/deploy.yml). Updates go live without a
# rebuild or restart.
:80 {
	root * /data
	encode zstd gzip
	file_server
}