{ on_demand_tls { ask http://pds:3000/tls-check } } {$DOMAIN}, *.{$DOMAIN} { tls { on_demand } reverse_proxy pds:3000 }