http:
  routers:
    forgejo:
      rule: "Host(`git.example.com`)"
      entryPoints:
        - websecure
      service: forgejo-service
      tls:
        certResolver: letsencrypt

  services:
    forgejo-service:
      loadBalancer:
        servers:
          - url: "http://localhost:3000"

  middlewares:
    security-headers:
      headers:
        browserXssFilter: true
        contentTypeNosniff: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 31536000
        customFrameOptionsValue: "SAMEORIGIN"