media.example.com {
	encode zstd gzip

	# dump endpoint (python service on the host, does its own auth)
	handle /dump* {
		reverse_proxy 127.0.0.1:8080
	}

	# Syncthing admin UI (its own login; strip the prefix, present a local Host to pass its host check)
	redir /sync /sync/ 308
	handle_path /sync/* {
		reverse_proxy 127.0.0.1:8384 {
			header_up Host {upstream_hostport}
		}
	}

	# OBS browser dock (static)
	handle_path /dock* {
		root * /srv/dock
		file_server
	}

	# everything else is copyparty (web UI + WebDAV)
	handle {
		reverse_proxy 127.0.0.1:3923 {
			flush_interval -1
		}
	}
}