{{ www_host }} {
	# PocketBase Admin UI and REST API (files included)
	redir /_ /_/
	handle /_/* {
		reverse_proxy {{ docker_container }}:{{ cms_port }}
	}
	handle /api/* {
		reverse_proxy {{ docker_container }}:{{ cms_port }}
	}

	# First-party analytics (Vince) — script (/stats/js/script.js) and event
	# endpoint (/stats/api/event) proxied same-origin so they survive ad
	# blockers and never touch a third-party domain.
	handle /stats/* {
		reverse_proxy {{ vince_container }}:{{ vince_port }}
	}

	# TanStack Start frontend
	handle {
		reverse_proxy {{ docker_container }}:{{ www_port }}
	}
}

{{ cms_host }} {
	redir / /_/
	reverse_proxy {{ docker_container }}:{{ cms_port }}
}