ota.nelim.org {
    tls matt@nelim.org {
        dns cloudflare {env.CLOUDFLARE_API_TOKEN}
        resolvers 1.0.0.1
    }
    reverse_proxy lineageOTA
}