54 lines
1.1 KiB
Plaintext
54 lines
1.1 KiB
Plaintext
{
|
|
# 인증서 관련
|
|
email abc@firstgarden.co.kr
|
|
|
|
# ACME 관련 기본값
|
|
acme_ca https://acme-v02.api.letsencrypt.org/directory
|
|
|
|
# 전역 로그
|
|
log {
|
|
level INFO
|
|
output file /var/log/caddy/access.log {
|
|
roll_size 10MiB
|
|
roll_keep 10
|
|
roll_keep_for 720h
|
|
}
|
|
}
|
|
|
|
# 기본 타임아웃 (프록시 공통)
|
|
servers {
|
|
timeouts {
|
|
read_body 30s
|
|
read_header 30s
|
|
write 30s
|
|
idle 2m
|
|
}
|
|
}
|
|
}
|
|
|
|
# ===== 공통 스니펫 =====
|
|
|
|
# 보안 헤더
|
|
(common_headers) {
|
|
header {
|
|
X-Frame-Options "DENY"
|
|
X-Content-Type-Options "nosniff"
|
|
Referrer-Policy "strict-origin-when-cross-origin"
|
|
X-XSS-Protection "1; mode=block"
|
|
}
|
|
}
|
|
|
|
# 프록시 기본 옵션
|
|
(common_proxy) {
|
|
reverse_proxy {
|
|
header_up X-Real-IP {remote_host}
|
|
header_up X-Forwarded-For {remote_host}
|
|
header_up X-Forwarded-Proto {scheme}
|
|
|
|
transport http {
|
|
dial_timeout 10s
|
|
response_header_timeout 30s
|
|
}
|
|
}
|
|
}
|