Gitea reverse proxy

web.config

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <rewrite>
            <rules>
                <clear />
                <rule name="Force HTTPS" enabled="true" stopProcessing="true">
                    <match url="(.*)" />
                    <conditions logicalGrouping="MatchAll" trackAllCaptures="false">
                        <add input="{HTTPS}" pattern="^OFF$" />
                        <add input="{HTTP_HOST}" pattern="(.*)" />
                    </conditions>
                    <action type="Redirect" url="https://{HTTP_HOST}/{R:1}" />
                </rule>
                <rule name="Gitea Reverse Proxy" stopProcessing="true">
                    <match url="(.*)" />
                    <action type="Rewrite" url="http://127.0.0.1:8099/{R:1}" logRewrittenUrl="true" />
                    <serverVariables>
                        <set name="HTTP_X_FORWARDED_HOST" value="{HTTP_HOST}" />
                        <set name="HTTP_X_FORWARDED_SCHEME" value="https" />
                        <set name="HTTP_X_FORWARDED_PROTO" value="https" />
                    </serverVariables>
                </rule>
            </rules>
        </rewrite>
        <security>
            <requestFiltering allowDoubleEscaping="true" unescapeQueryString="false" removeServerHeader="true">
                <fileExtensions>
                    <clear />
                    <add fileExtension=".*" allowed="true" />
                </fileExtensions>
                <requestLimits maxAllowedContentLength="4294967295" maxUrl="4294967295" maxQueryString="4294967295">
                    <headerLimits>
                        <clear />
                    </headerLimits>
                </requestLimits>
                <hiddenSegments>
                    <clear />
                </hiddenSegments>
                <verbs applyToWebDAV="true">
                    <clear />
                </verbs>
            </requestFiltering>
        </security>
        <handlers>
            <clear />
        </handlers>
        <modules>
            <remove name="AspNetCoreModule" />
            <remove name="ServiceModel-4.0" />
            <remove name="ServiceModel" />
            <remove name="ScriptModule-4.0" />
            <remove name="UrlRoutingModule-4.0" />
            <remove name="Profile" />
            <remove name="FileAuthorization" />
            <remove name="UrlAuthorization" />
            <remove name="RoleManager" />
            <remove name="FormsAuthentication" />
            <remove name="WindowsAuthentication" />
            <remove name="Session" />
            <remove name="OutputCache" />
        </modules>
        <httpErrors errorMode="Detailed" />
        <urlCompression doStaticCompression="false" doDynamicCompression="false" />
        <tracing>
            <traceFailedRequests>
                <add path="*">
                    <traceAreas>
                        <add provider="ASP" verbosity="Verbose" />
                        <add provider="ASPNET" areas="Infrastructure,Module,Page,AppServices" verbosity="Verbose" />
                        <add provider="ISAPI Extension" verbosity="Verbose" />
                        <add provider="WWW Server" areas="Authentication,Security,Filter,StaticFile,CGI,Compression,Cache,RequestNotifications,Module,FastCGI,WebSocket,RequestRouting,Rewrite" verbosity="Verbose" />
                    </traceAreas>
                    <failureDefinitions timeTaken="00:00:00" statusCodes="500-550" />
                </add>
            </traceFailedRequests>
        </tracing>
    </system.webServer>
</configuration>