{
    # Global options
    admin off  # Disable admin API for security
    auto_https disable_redirects  # Let Cloudflare handle HTTPS redirects
    
    # Email for ACME certificates
    email ${email}
    
    # Server configuration
    servers {
        # Use explicit Cloudflare IP ranges instead of the module
        trusted_proxies static 173.245.48.0/20 103.21.244.0/22 103.22.200.0/22 103.31.4.0/22 141.101.64.0/18 108.162.192.0/18 190.93.240.0/20 188.114.96.0/20 197.234.240.0/22 198.41.128.0/17 162.158.0.0/15 104.16.0.0/13 104.24.0.0/14 172.64.0.0/13 131.0.72.0/22
    }
    
    # ACME DNS configuration for Cloudflare
    ${acme_dns_auth}
    
    # Storage configuration
    storage file_system {
        root ${data_dir}
    }
}

# Site blocks will be appended here
