{$nassella_SUBDOMAIN}.{$ROOT_DOMAIN} {
  import maintenance_intercept

  route {
    @authelia path /authelia /authelia/*
    handle @authelia {
      reverse_proxy nassella_authelia:9091
    }

    handle /unsecured/* {
      reverse_proxy http://nassella:8080
    }

    forward_auth nassella_authelia:9091 {
      uri /api/authz/forward-auth
      copy_headers Remote-User Remote-Groups Remote-Email Remote-Name
    }

    reverse_proxy http://nassella:8080
  }
}

lldap.{$nassella_SUBDOMAIN}.{$ROOT_DOMAIN} {
  import maintenance_intercept
  reverse_proxy nassella_lldap:17170
}
