# ==============================================================================
# 家庭公网 HTTPS 统一反向代理网关 (Mac mini: 10443 端口)
# 证书：/certs/fullchain.pem & /certs/privkey.pem (由 acme.sh 自动续签 *.home.961504.xyz)
# ==============================================================================
{
    auto_https disable_redirects
}

# 1. 极空间 Z4 NAS (https://z4.home.961504.xyz:10443 或 https://nas.home.961504.xyz:10443)
nas.home.961504.xyz:10443, z4.home.961504.xyz:10443 {
    tls /certs/fullchain.pem /certs/privkey.pem
    encode zstd gzip
    reverse_proxy 192.168.31.185:5055
}

# 2. Lucky 控制台 (https://lucky.home.961504.xyz:10443)
lucky.home.961504.xyz:10443 {
    tls /certs/fullchain.pem /certs/privkey.pem
    encode zstd gzip
    reverse_proxy host.docker.internal:16601
}

# 3. 路由器 Mihomo / Clash 面板 (https://clash.home.961504.xyz:10443)
clash.home.961504.xyz:10443 {
    tls /certs/fullchain.pem /certs/privkey.pem
    encode zstd gzip
    reverse_proxy 192.168.31.1:9999
}
