yourdomain.com {
    tls {
      on_demand
    }

    handle /xrpc/com.atproto.sync.subscribeRepos {
      reverse_proxy 127.0.0.1:2470 {
        header_up Origin "yourdomain.com"
      }
    }

    reverse_proxy localhost:2470
    reverse_proxy localhost:3000
}