[general]
host = "0.0.0.0"
port = 8443
root = "/public"

log-level = "error"
compression = true

http2 = true
http2-tls-cert = "/tls/tls.crt"
http2-tls-key = "/tls/tls.key"

security-headers = true

[[advanced.headers]]
source = "**/*"

[advanced.headers.headers]
"X-Content-Type-Options" = "nosniff"
"Referrer-Policy" = "strict-origin-when-cross-origin"
"Content-Security-Policy" = "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;"