Caddyfile ビルダー＆ジェネレーター

{
    email [email protected]
}

app.example.com {
    # Gzip and Zstandard high-performance compression
    encode gzip zstd

    # Security response headers
    header {
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        X-Content-Type-Options "nosniff"
        X-Frame-Options "SAMEORIGIN"
        Referrer-Policy "strict-origin-when-cross-origin"
    }

    # Reverse proxy upstream
    reverse_proxy 127.0.0.1:3000

    # JSON structured access logs
    log {
        output file /var/log/caddy/access.log
        format json
    }

}