heartys-booth.136.80.253.72.nip.io {
    header {
        Strict-Transport-Security "max-age=31536000"
        X-Content-Type-Options "nosniff"
        Referrer-Policy "same-origin"
    }
    @deviceEntry {
        path /
        not query server=1
    }
    redir @deviceEntry /device/ 307
    redir /device /device/ 308
    handle_path /device/* {
        root * /srv/hearty-device-studio
        header {
            Content-Security-Policy "default-src 'self'; script-src 'self' 'wasm-unsafe-eval' blob:; worker-src 'self' blob:; connect-src 'self' https://huggingface.co https://*.huggingface.co https://*.hf.co; img-src 'self' data: blob:; media-src 'self' blob:; style-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
            Permissions-Policy "camera=(), microphone=(), geolocation=()"
            Cache-Control "no-cache"
        }
        file_server
    }
    handle_path /booth-api/* {
        reverse_proxy 127.0.0.1:8764
    }
    handle {
        reverse_proxy 127.0.0.1:7860
    }
}
