fluxheim/packaging/default/fluxheim.toml at main · valkyoth/fluxheim · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
include_conf_d = true

[server]
listen = ["0.0.0.0:80"]
default_vhost = "default"
trusted_proxies = []

[server.process]
daemon = false
pid_file = "/run/fluxheim/fluxheim.pid"
upgrade_sock = "/run/fluxheim/fluxheim-upgrade.sock"
certificate_reload_sock = "/run/fluxheim/fluxheim-cert-reload.sock"
grace_period_seconds = 2
graceful_shutdown_timeout_seconds = 5

[server.https_redirect]
enabled = false
status = 308

[server.limits]
max_request_header_bytes = "64KiB"
max_uri_bytes = "8KiB"
max_request_headers = 100
max_request_body_bytes = "16MiB"

[logging]
level = "info"
format = "json"
target = "stderr"

[logging.file]
enabled = false
append = true

[logging.access]
enabled = true
include_host = true
include_path = true
request_id = true
request_id_header = "x-request-id"

[headers.request]
enabled = true
strip_inbound_client_ip_headers = true
x_forwarded_for = "replace"
x_real_ip = true
x_forwarded_host = true
x_forwarded_proto = true
forwarded = false
remove = ["x-powered-by"]

[headers.request.add]
x-proxy-by = "Fluxheim"
x-forwarded-host = "{host}"

[headers.request.append]
via = "fluxheim"

[headers.response]
enabled = true
x_content_type_options = "nosniff"
x_frame_options = "DENY"
referrer_policy = "no-referrer"
remove = ["x-powered-by"]

[headers.response.add]
cache-control = "public, max-age=60"

[headers.response.append]
vary = ["Accept-Encoding"]

[tls]
enabled = false
backend = "rustls"

# To enable HTTPS, add server.tls_listen and certificate paths:
#
# [server]
# tls_listen = ["0.0.0.0:443"]
#
# [tls]
# enabled = true
# backend = "rustls"
#
# [[tls.certificates]]
# cert_path = "/etc/fluxheim/tls/fullchain.pem"
# key_path = "/etc/fluxheim/tls/key.pem"

[cache]
enabled = false
image_extensions = ["avif", "gif", "jpeg", "jpg", "png", "svg", "webp"]
methods = ["GET", "HEAD"]
max_object_bytes = "32MiB"

[cache.memory]
enabled = false
max_size_bytes = "1GiB"

[cache.disk]
backend = "filesystem"
enabled = false
max_size_bytes = "10GiB"

[[vhosts]]
name = "default"
hosts = ["localhost", "127.0.0.1", "example.test"]

[vhosts.web]
root = "/srv/fluxheim"
index_files = ["index.html"]
deny_dotfiles = true
cache_control = "public, max-age=60"