{
    debug
}

:8443 {
    tls /certs/foo.crt /certs/foo.key {
        client_auth {
            mode require_and_verify
            trusted_ca_cert_file /certs/root_ca.crt
        }
    }

    reverse_proxy rest-server:8000 {
        header_up Host {host}
        header_up X-Real-IP {remote}
        header_up X-Forwarded-For {remote}
        header_up X-Forwarded-Proto {scheme}
    }
}