auth.{$DOMAIN}:443 {
    reverse_proxy zitadel:8080
    tls internal
}