# Halkyon Meditate's site (compose.meditate.yaml, ADR 0038, step 7): its API server, and
# the operator's library's files from its web server (D16), which serves them only with
# an access its catalogue gave a person signed in. Never the register's calls between
# the instance's services (`/halkyon-base/…`, ADR 0016), which its web server takes on
# the instance's own network alone: only /library/* goes there.
{$MEDITATE_DOMAIN} {
	encode zstd gzip

	# Recordings and pictures, served by ranges (encode leaves audio and pictures
	# as they are).
	handle /library/* {
		reverse_proxy meditate-server:8082
	}

	# Serverpod's streaming methods use WebSockets; reverse_proxy upgrades them as-is.
	# The visitor's address comes last in X-Forwarded-For, as for Learn's server.
	handle {
		reverse_proxy meditate-server:8080
	}
}