{ on_demand_tls { ask http://{$APP_HOST}:3000/tls-check } } {$DOMAIN}, *.{$DOMAIN} { tls { on_demand } reverse_proxy {$APP_HOST}:3000 }