https://{$DOMAIN} {
    import blocked_matcher
    handle @blocked {
        file_server {
            root /var/www
            status 403
        }
    }
    reverse_proxy http://localhost:8086
}