diff --git a/conf.d/default.caddy b/conf.d/default.caddy new file mode 100644 index 0000000..2eda532 --- /dev/null +++ b/conf.d/default.caddy @@ -0,0 +1,53 @@ +{ + # 인증서 관련 + email abc@firstgarden.co.kr + + # ACME 관련 기본값 + acme_ca https://acme-v02.api.letsencrypt.org/directory + + # 전역 로그 + log { + level INFO + output file /var/log/caddy/access.log { + roll_size 10MiB + roll_keep 10 + roll_keep_for 720h + } + } + + # 기본 타임아웃 (프록시 공통) + servers { + timeouts { + read_body 30s + read_header 30s + write 30s + idle 2m + } + } +} + +# ===== 공통 스니펫 ===== + +# 보안 헤더 +(common_headers) { + header { + X-Frame-Options "DENY" + X-Content-Type-Options "nosniff" + Referrer-Policy "strict-origin-when-cross-origin" + X-XSS-Protection "1; mode=block" + } +} + +# 프록시 기본 옵션 +(common_proxy) { + reverse_proxy { + header_up X-Real-IP {remote_host} + header_up X-Forwarded-For {remote_host} + header_up X-Forwarded-Proto {scheme} + + transport http { + dial_timeout 10s + response_header_timeout 30s + } + } +}