miom.space/Caddyfile

49 lines
1.1 KiB
Caddyfile
Raw Normal View History

2022-01-16 21:05:02 +00:00
# global options
2021-10-22 11:13:16 +00:00
{
# remove comment to use staging Let's Encrypt servers (for testing)
# acme_ca https://acme-staging-v02.api.letsencrypt.org/directory
2022-01-16 21:05:02 +00:00
# auto_https contact mail address, for TLS certs notifications (expiry,
# other problems with certs)
email admins@pub.solar
2021-10-22 11:13:16 +00:00
}
# security and privacy header snippet
(security_headers) {
header {
# disable FLoC tracking
Permissions-Policy interest-cohort=()
2022-01-16 21:05:02 +00:00
# enable HSTS
Strict-Transport-Security max-age=63072000;
# disable clients from sniffing the media type
X-Content-Type-Options nosniff
# clickjacking protection
X-Frame-Options DENY
# keep referrer data off of HTTP connections
Referrer-Policy no-referrer-when-downgrade
}
}
# static file server
miom.space {
import security_headers
root * /srv/miom.space
file_server
# caddys default is no access logs at all
# comment this block out for debugging
#log {
# output file /var/log/caddy-access.log
#}
}
# redirect www. subdomain to apex (root) domain
www.miom.space {
import security_headers
redir https://miom.space{uri}
}