Permalink
Switch branches/tags
Nothing to show
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
80 lines (65 sloc) 2.2 KB
(security-config) {
tls {
protocols tls1.2
ciphers ECDHE-ECDSA-WITH-CHACHA20-POLY1305 ECDHE-ECDSA-AES256-GCM-SHA384 ECDHE-ECDSA-AES128-GCM-SHA256
curves X25519 p256 p384
key_type p256
must_staple
}
header / {
Content-Security-Policy "default-src 'none' ; style-src 'self' ; img-src 'self' ; frame-ancestors 'none' ; form-action 'none' ; block-all-mixed-content; sandbox; base-uri 'none';"
X-XSS-Protection "1; mode=block"
Referrer-Policy no-referrer
X-Frame-Options DENY
X-Content-Type-Options nosniff
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
Expect-CT "max-age=86400, enforce"
Cache-Control "public, max-age=3600"
}
}
https://vcsjones.com {
import security-config
root /var/wwwroot/vcsjones.com
header /css {
Cache-Control "public, immutable, max-age=315360000"
Access-Control-Allow-Origin *
Vary Origin
-Content-Security-Policy
-X-XSS-Protection
-X-Frame-Options
}
header /images {
Vary Accept
Cache-Control "public, immutable, max-age=315360000"
-Content-Security-Policy
-X-XSS-Protection
-X-Frame-Options
}
header /feed.xml {
Content-Type "application/rss+xml; charset=utf-8"
}
rewrite /images {
ext .png .jpeg .jpg
if {>Accept} has image/webp
to {path}.webp {path}
}
redir /feed/ feed.xml 301
redir /ovst https://github.com/vcsjones/OpenVsixSignTool 302
redir /ast https://github.com/vcsjones/AzureSignTool 302
redir /modpow https://www.mtholyoke.edu/courses/quenell/s2003/ma139/js/powermod.html 302
status 204 /favicon.ico
errors {
404 404/index.html
}
log / /var/log/caddy/requests.log "\{ \"path\": \"{path}\", \"proto\": \"{proto}\", \"when\": \"{when}\", \"tls_cipher\": \"{tls_cipher}\", \"tls_protocol\": \"{tls_protocol}\" \}" {
rotate_size 50
rotate_age 90
rotate_keep 20
}
}
https://vcsjones.codes https://www.vcsjones.codes https://www.vcsjones.com {
import security-config
redir 301 {
/ https://vcsjones.com{uri}
}
}