{
    # Traefik terminates TLS; Caddy serves HTTP behind Traefik only
    auto_https off
}

:80 {
    encode gzip
    root * /var/www/html

    # CORS headers matching prior Nginx behavior
    @options method OPTIONS
    header {
        Access-Control-Allow-Methods "GET, POST, OPTIONS, PUT, DELETE"
        Access-Control-Allow-Headers "Authorization, Content-Type, X-Requested-With, X-Customer-Number"
        Access-Control-Allow-Credentials true
        Access-Control-Allow-Origin "*"
    }
    respond @options 204

    # PHP handling via FastCGI to php-fpm pool
    php_fastcgi php1:9000 php2:9000 php3:9000 php4:9000 php5:9000

    try_files {path} {path}/ /index.php
    file_server

    log {
        output file /var/log/caddy/access.log {
            roll_size 10MiB
            roll_keep 5
            roll_keep_for 720h
        }
        format json
    }
}
