server:
  bind_address: ":9090"
  tls:
    enabled: false
    cert_file: "cert.pem"
    key_file: "key.pem"
upstream:
  provider: hetzner
  hetzner:
    # Provide the API token directly
    # api_token: "YOUR_HETZNER_API_TOKEN"
    # OR provide the path to a file containing the token
    api_token_file: "/path/to/your/hetzner_token.txt"
clients:
  client1:
    secret: "s3cr3t123"
    exact:
      - "home.example.com"
    wildcard:
      - "example.net"