http:
  routers:
    nextcloud:
      rule: Host(`cloud.xtao.net`)
      entryPoints: [websecure]
      service: nextcloud
      middlewares: [nextcloud-headers]
      tls: {}
    nextcloud-wellknown-dav:
      rule: Host(`cloud.xtao.net`) && (Path(`/.well-known/caldav`) || Path(`/.well-known/carddav`))
      entryPoints: [websecure]
      service: nextcloud
      middlewares: [nextcloud-dav-redirect]
      tls: {}
  services:
    nextcloud:
      loadBalancer:
        passHostHeader: true
        servers:
          - url: http://nextcloud-web:80
  middlewares:
    nextcloud-dav-redirect:
      redirectRegex:
        regex: "^https://cloud\\.xtao\\.net/\\.well-known/(card|cal)dav/?$"
        replacement: "https://cloud.xtao.net/remote.php/dav/"
        permanent: true
    nextcloud-headers:
      headers:
        stsSeconds: 15552000
        stsIncludeSubdomains: true
        stsPreload: true
        customRequestHeaders:
          X-Forwarded-Proto: "https"