{
	acme_dns hetzner $hetzner_secret
}

(blocked_matcher) {
    @blocked not remote_ip 10.0.0.0/24 10.0.89.0/24 127.0.0.1
}
(internal_only) {
    import blocked_matcher
    handle @blocked {
        abort
    }
}

import /etc/caddy/conf.d/*