simple-httpd/config/examples/security.yml.example at main · SimpleDaemons/simple-httpd · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
# simple-httpd — security (YAML)
# Same keys as security.conf.example.

listen_address: 0.0.0.0
listen_port: 443
document_root: /var/www/html
index_files:
  - index.html
directory_listing: false
follow_symlinks: false
cache_max_age: 0
server_name: simple-httpd
worker_threads: 8
http2: true
max_connections: 256
request_timeout_seconds: 15
keep_alive: true
keep_alive_timeout_seconds: 5
max_request_size: 8192
max_header_count: 32
compression: true
compression_min_length: 1024
ssl_cert: /etc/simple-httpd/tls/fullchain.pem
ssl_key: /etc/simple-httpd/tls/privkey.pem
hsts: true
hsts_max_age: 31536000
security_headers: true
x_frame_options: DENY
referrer_policy: strict-origin-when-cross-origin
csp: "default-src 'self'; style-src 'self' 'unsafe-inline'"
allow_methods:
  - GET
  - HEAD
  - OPTIONS
rate_limit_enabled: true
rate_limit_requests: 60
rate_limit_window_seconds: 60
health_path: /healthz
metrics_path: /metrics
log_level: warn
access_log: /var/log/simple-httpd/access.log
error_log: /var/log/simple-httpd/error.log