mirotalk.nomadro.com {
	encode gzip
	reverse_proxy https://mirotalk.nomadro.cn {
		header_up Host mirotalk.nomadro.cn
		# Upstream CSP omits nomadweb.nomadro.com; strip so our frame-ancestors win.
		header_down -Content-Security-Policy
		header_down -X-Frame-Options
		transport http {
			tls_insecure_skip_verify
		}
	}
	header {
		Content-Security-Policy "frame-ancestors 'self' https://nomadweb.nomadro.com https://nomadro.cn https://www.nomadro.cn http://localhost:3001 http://127.0.0.1:3001"
		-X-Frame-Options
	}
}