# One site block per market app host — add app.alven.cz here when CZ goes live.
# HTTP→HTTPS redirect is automatic in Caddy; HSTS set explicitly.
app.alven.sk {
	encode gzip
	header Strict-Transport-Security "max-age=15552000; includeSubDomains"
	header X-Content-Type-Options nosniff
	header Referrer-Policy strict-origin-when-cross-origin
	reverse_proxy web:80
}
