{
    # Allow us to test origin fails due to mismatching schemes
    auto_https disable_redirects
}

https://target.localhost, http://target.localhost {
    reverse_proxy :5000
}

https://attacker.target.localhost, http://attacker.target.localhost {
    reverse_proxy :5001
}