{
    email abuse@habalancer.tld

    log {
        output file /var/log/caddy/access.log
        format json
    }

    servers {
        timeouts {
            read_body 10s
            read_header 5s
            write 10s
            idle 2m
        }
    }
}

import /etc/tunnel-manager/domains.d/*.conf

(proxy_settings) {
    header {
        Cache-Control "public, max-age=3600, stale-while-revalidate=86400"
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
        X-Content-Type-Options "nosniff"
        Referrer-Policy "strict-origin-when-cross-origin"
    }

    @cached_routes {
        path /static/* /assets/* /images/* /css/* /js/*
    }

    handle @cached_routes {
        cache {
             ttl 1h
            stale 24h
            storage file /tmp/caddy-cache
        }
    }
}