{ on_demand_tls { ask http://app:3000/tls-check } } {$DOMAIN}, *.{$DOMAIN} { tls { on_demand } reverse_proxy app:3000 }