# ACME Reverse Proxy Configuration Example

# CA (Certificate Authority) settings for Let's Encrypt
[CA]
  Email    = "admin@example.com"           # Your email for Let's Encrypt registration
  CacheDir = "/var/lib/acme-reverseproxy"  # Directory to store certificates

# Well-known directory for ACME challenges (used if NFS is disabled)
WellKnownDir = "/tmp/.well-known"

# NFS configuration for .well-known directory
# When enabled, the .well-known directory will be mounted from NFS server
[NFS]
  enabled     = false                             # Set to true to enable NFS mounting
  server      = "10.200.1.3"                      # NFS server address
  export_path = "/export/acme"                    # NFS export path
  mount_point = "/mnt/acme-wellknown"             # Local mount point
  options     = "rw,vers=4.1,timeo=50,retrans=2"  # Mount options (optional)

# Domain to backend mappings
# Format: "domain.com" = "http://backend:port" or "https://backend:port"
[Mapping]
  "example.com"        = "http://localhost:8080"
  "secure.example.com" = "https://localhost:8443"
  "api.example.com"    = "http://192.168.1.10:3000"