(defaults) {
    # hsts on
    header Strict-Transport-Security max-age=31536000;
    @blocked {
        path /cache /cache/* /.htaccess /config.php /.git
    }
}
music.domain.com {
    # example for airsonic
    import defaults
    reverse_proxy 10.8.0.3:4040
}