server:
  bind_address: ":9090"
  tls:
    enabled: false
    cert_file: "cert.pem"
    key_file: "key.pem"
upstream:
  provider: hetzner
  hetzner:
    api_token: "YOUR_HETZNER_API_TOKEN"
clients:
  client1:
    secret: "s3cr3t123"
    exact:
      - "home.example.com"
    wildcard:
      - "example.net"