{$VISAPOST_DOMAIN} {
  encode zstd gzip

  header {
    Strict-Transport-Security "max-age=31536000; includeSubDomains"
    X-Content-Type-Options "nosniff"
    Referrer-Policy "strict-origin-when-cross-origin"
  }

  handle_path /source/* {
    root * /srv/source
    header Content-Disposition "attachment"
    file_server
  }

  handle {
    reverse_proxy visapost:5000
  }
}
