# 보안 헤더 (common_headers) { header { X-Frame-Options "DENY" X-Content-Type-Options "nosniff" Referrer-Policy "strict-origin-when-cross-origin" X-XSS-Protection "1; mode=block" } } # 프록시 기본 옵션 (common_proxy) { header_up X-Real-IP {remote_host} #header_up X-Forwarded-For {remote_host} #header_up X-Forwarded-Proto {scheme} transport http { dial_timeout 10s response_header_timeout 30s } }