:8080 {
  # Root goes to your org
  @root path_regexp root ^/$
  rewrite @root /planetrenox

  # Routes that should pass directly to Gitea (users, assets, etc.)
  @blocked path ^/(api|assets|avatars|css|js|vendor|img|swagger|explore|user|users|login|signup|notifications|issues|pulls|milestones|admin|site|serviceworker|manifest\.json|favicon\.ico|robots\.txt)(/|$)

  handle @blocked {
    reverse_proxy 127.0.0.1:3000
  }

  # Single path segment → treat as a repo inside planetrenox
  @single path_regexp single ^/([^/]+)$
  handle @single {
    rewrite * /planetrenox/{http.regexp.single.1}
    reverse_proxy 127.0.0.1:3000
  }

  # Fallback: send everything else to Gitea
  reverse_proxy 127.0.0.1:3000
}