[general]
host = "::"
port = 8087
root = "docker/public"
log-level = "debug"
cache-control-headers = true
compression = true
page404 = "docker/public/404.html"
page50x = "docker/public/50x.html"
http2 = false
http2-tls-cert = ""
http2-tls-key = ""
security-headers = true
cors-allow-origins = ""
directory-listing = false
basic-auth = ""
threads-multiplier = 1
grace-period = 0
page-fallback = ""
[advanced]
[[headers]]
source = "**/*.@(eot|otf|ttf|ttc|woff|font.css)"
headers = { Access-Control-Allow-Origin = "*", X-XSS-PROTECTION = "1; mode=block" }
[[headers]]
source = "**/*.@(jpg|jpeg|gif|png)"
[headers.headers]
Cache-Control = "max-age=7200"
Content-Security-Policy = "frame-ancestors 'self'"
[[headers]]
source = "404.html"
headers.Cache-Control = "max-age=300"
headers.Strict-Transport-Security = "max-age=63072000; includeSubDomains; preload"