media.lan.poldebra.me {
    tls /cert.crt /cert.key

    header {
      X-Real-IP {remote_host}
      X-Forwarded-For {remote_host}
      X-Forwarded-Proto {scheme}
      X-Forwarded-Host {host}
      X-Forwarded-Port {server_port}
    }

    reverse_proxy 172.21.0.5:8096 {
      header_up X-Forwarded-Proto {scheme}
    }
}