# Replace the example hostname with the approved sync domain before deployment.
sync.example.com {
    encode zstd gzip
    request_body {
        max_size 211MB
    }
    reverse_proxy 127.0.0.1:4387
    header {
        Strict-Transport-Security "max-age=31536000"
        X-Content-Type-Options "nosniff"
        Referrer-Policy "no-referrer"
    }
    # Deliberately no access-log directive. Never log Authorization headers.
}
