# Caddyfile for the EVENT SIMULATION stack (e2e/docker-compose.sim.yml).
# Identical in behaviour to Caddyfile.test — same compression carve-out for SSE,
# same security headers, same export framing rules — but on :3102 so the
# simulation can run without colliding with the :3101 Playwright stack.

:3102 {
    # Mirror prod: exclude the SSE stream from compression so buffering doesn't
    # delay real-time events.
    @compressible not path /api/v1/stream
    encode @compressible zstd gzip

    header {
        X-Content-Type-Options "nosniff"
        Referrer-Policy "strict-origin-when-cross-origin"
    }

    @framable path /api/v1/export/zip /api/v1/export/html
    @not_framable not path /api/v1/export/zip /api/v1/export/html
    header @framable X-Frame-Options "SAMEORIGIN"
    header @not_framable X-Frame-Options "DENY"

    reverse_proxy /api/* app:3000
    reverse_proxy /media/* app:3000
    reverse_proxy /health app:3000

    reverse_proxy frontend:3001
}