From 010073dabf227a7ed1f872118a64c952a1b9b105 Mon Sep 17 00:00:00 2001
From: Fred Boniface <fjla@fredboniface.co.uk>
Date: Tue, 1 Sep 2026 11:30:39 +0100
Subject: [PATCH] Upgrade to SWS v3 and enable TLS - certificate mounting
 required

---
 Dockerfile  |  4 ++--
 config.toml | 14 ++++++++++++--
 2 files changed, 14 insertions(+), 4 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index b969241..69ab146 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,8 +5,8 @@ RUN pip install --no-cache-dir -r requirements.txt
 COPY . .
 RUN mkdocs build --clean
 
-FROM joseluisq/static-web-server:2
+FROM joseluisq/static-web-server:3
 COPY config.toml /config.toml
 COPY --from=builder /docs/site /public
-ENV SWS_CONFIG_FILE=/config.toml
+ENV SERVER_CONFIG_FILE=/config.toml
 EXPOSE 8080
\ No newline at end of file
diff --git a/config.toml b/config.toml
index 4708478..4b978bb 100644
--- a/config.toml
+++ b/config.toml
@@ -1,14 +1,24 @@
 [general]
 host = "0.0.0.0"
-port = 8080
+port = 8443
 root = "/public"
+
 log-level = "error"
 compression = true
 
+tls = true
+tls-cert = "/tls/tls.crt"
+tls-key = "/tls/tls.key"
+http2 = true
+
+security-headers = true
+
+[advanced]
+
 [[advanced.headers]]
 source = "**/*"
+
 [advanced.headers.headers]
-"X-Frame-Options" = "DENY"
 "X-Content-Type-Options" = "nosniff"
 "Referrer-Policy" = "strict-origin-when-cross-origin"
 "Content-Security-Policy" = "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;"
\ No newline at end of file