{
    debug
}

:8443 {
    tls /certs/foo.crt /certs/foo.key {
        protocols tls1.3
        client_auth {
            mode require_and_verify
            trusted_ca_cert_file /certs/root_ca.crt
        }
    }
    reverse_proxy rest-server:8000
}