{
  email dead@cxap.space
  dns cloudflare {$CF_API_TOKEN}
  servers {
    dns cloudflare {env.CF_API_TOKEN}
    trusted_proxies static private_ranges
  }
}

# общий сниппет авторизации
(tinyauth_forwarder) {
  forward_auth tinyauth:3000 {
    uri /api/auth/caddy
    copy_headers Remote-User Remote-Name Remote-Email Remote-Groups
  }
}

# при желании — отдельный сниппет для API
(tinyauth_api_forwarder) {
  forward_auth tinyauth:3000 {
    uri /api/auth/caddy
    header_up Authorization {http.request.header.X-Api-Key}
    header_up Accept application/json
  }
}