mud.iamtalon.me {
    header {
        Content-Security-Policy "default-src 'self'; connect-src 'self' wss://mud.iamtalon.me; img-src 'self' data:; media-src 'self' https: blob:; style-src 'self' 'unsafe-inline'; script-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'; form-action 'self'"
        Referrer-Policy "no-referrer"
        X-Content-Type-Options "nosniff"
        X-Frame-Options "DENY"
        Permissions-Policy "camera=(), microphone=(), geolocation=()"
    }
    # For WebSocket requests to /mud-ws, proxy to the WebSocket server on port 3001
    @websocket {
        path /mud-ws*
    }
    reverse_proxy @websocket svelte-mud-proxy:3001

    # For all other requests, proxy to the SvelteKit app on port 3000
    reverse_proxy svelte-mud-app:3000
}