{
    # 인증서 관련
    email abc@firstgarden.co.kr

    # ACME 관련 기본값
    acme_ca https://acme-v02.api.letsencrypt.org/directory

    # 전역 로그
    log {
        level INFO
        output file /var/log/caddy/access.log {
            roll_size 10MiB
            roll_keep 10
            roll_keep_for 720h
        }
    }

    # 기본 타임아웃 (프록시 공통)
    servers {
        timeouts {
            read_body 30s
            read_header 30s
            write 30s
            idle 2m
        }
    }
}

# ===== 공통 스니펫 =====

# 보안 헤더
(common_headers) {
    header {
        X-Frame-Options "DENY"
        X-Content-Type-Options "nosniff"
        Referrer-Policy "strict-origin-when-cross-origin"
        X-XSS-Protection "1; mode=block"
    }
}

# 프록시 기본 옵션
(common_proxy) {
    reverse_proxy {
        header_up X-Real-IP {remote_host}
        header_up X-Forwarded-For {remote_host}
        header_up X-Forwarded-Proto {scheme}

        transport http {
            dial_timeout 10s
            response_header_timeout 30s
        }
    }
}