matrix-synapse

https://matrix.DOMAIN {
	# If you use your own certificates, your path may differ
	# If you wish to use Caddy's built-in Let's Encrypt support, you can also supply an email address here
	tls /matrix/ssl/config/live/matrix.DOMAIN/fullchain.pem /matrix/ssl/config/live/matrix.DOMAIN/privkey.pem

	root /matrix/static-files

	header / {
		Access-Control-Allow-Origin *
		Strict-Transport-Security "mag=age=31536000;"
		X-Frame-Options "DENY"
		X-XSS-Protection "1; mode=block"
	}

	# Identity server traffic
	proxy /_matrix/identity matrix-ma1sd:8090 {
		transparent
	}
	proxy /_matrix/client/r0/user_directory/search matrix-ma1sd:8090 {
		transparent
	}

	# Synapse Client<>Server API
	proxy /_matrix matrix-synapse-reverse-proxy-companion:8008 {
		transparent
		except /_matrix/identity/ /_matrix/client/r0/user_directory/search
	}
	proxy /_synapse/client matrix-synapse-reverse-proxy-companion:8008 {
		transparent
	}
}