{
	# Disable automatic HTTPS since we provide our own certs
	auto_https off
}

# VoceChat - vocechat.binbim.locker
vocechat.binbim.locker {
	tls /certs/vocechat/cert.pem /certs/vocechat/key.pem

	# VoceChat API + Web client
	handle {
		reverse_proxy vocechat-server:3000
	}

	# LiveKit signaling via /rtc path
	handle /rtc/* {
		reverse_proxy livekit-server:7880
	}
}

# LiveKit - livekit.binbim.locker (for direct WSS access if needed)
livekit.binbim.locker {
	tls /certs/livekit/cert.pem /certs/livekit/key.pem

	handle {
		reverse_proxy livekit-server:7880
	}
}