blog-ahmza-com/sws.toml

[general]

#### Server

# Listen on all interfaces, port 80 (matches previous nginx setup)
host = "0.0.0.0"
port = 80

# Root directory of the static site (Hugo `public/` output)
root = "/public"

# Number of worker threads (0 = auto-detect based on CPU cores)
threads-multiplier = 1

# Log level
log-level = "info"

#### Performance / caching

# Compression is handled by the upstream reverse proxy, so it is disabled
# here to avoid doing the work twice (wasted CPU per request). Re-enable if
# SWS is ever exposed directly without a compressing proxy in front.
compression = false
compression-static = false

# Emit Cache-Control + ETag headers with sensible per-content-type defaults.
# The origin is the correct place to declare cacheability; the proxy/CDN
# passes these through. SWS applies long-lived caching to static assets
# (images, css, js, fonts) and short/no-cache to HTML.
cache-control-headers = true

#### Routing

# SPA-style fallback: serve index.html when a path is not found on disk,
# mirroring the previous nginx `try_files $uri $uri/ /index.html`.
page-fallback = "/public/index.html"

#### Security

# Security headers are set by the upstream reverse proxy, so they are
# disabled here to avoid duplicate/conflicting headers. Let one layer own
# the security posture. Re-enable if SWS is exposed without such a proxy.
security-headers = false

# Health endpoint at /health for container/K8s liveness probes
health = true