{$RMM_DOMAIN} {
	encode zstd gzip

	reverse_proxy rmm-server:8080

	header {
		Strict-Transport-Security "max-age=31536000; includeSubDomains"
		X-Content-Type-Options "nosniff"
		X-Frame-Options "DENY"
		Referrer-Policy "same-origin"
	}
}