http:
  middlewares:

    # metrics
    replacepath-bare:
      replacepath:
        path: /
    replacepath-metrics:
      replacepath:
        path: /metrics

    # authelia
    authelia:
      forwardAuth:
        trustForwardHeader: true
        authResponseHeaders: Remote-User,Remote-Groups,Remote-Email,Remote-Name
        maxResponseBodySize: 104857600 # 100MB in bytes
% if node.name == "inazuma":
        address: http://authelia:9091/api/authz/forward-auth
% elif node.name == "shimakaze":
        address: http://inazuma:9091/api/authz/forward-auth
% endif

% if node.name == "inazuma--TODO":
    # tsauth
    tsauth:
      forwardAuth:
        trustForwardHeader: true
        authResponseHeaders: ^Tailscale-
        address: http://localhost:3000
% endif