[general] #### Server # Listen on all interfaces, port 80 (matches previous nginx setup) host = "0.0.0.0" port = 80 # Root directory of the static site (Hugo `public/` output) root = "/public" # Number of worker threads (0 = auto-detect based on CPU cores) threads-multiplier = 1 # Log level log-level = "info" #### Performance / caching # Compression is handled by the upstream reverse proxy, so it is disabled # here to avoid doing the work twice (wasted CPU per request). Re-enable if # SWS is ever exposed directly without a compressing proxy in front. compression = false compression-static = false # Emit Cache-Control + ETag headers with sensible per-content-type defaults. # The origin is the correct place to declare cacheability; the proxy/CDN # passes these through. SWS applies long-lived caching to static assets # (images, css, js, fonts) and short/no-cache to HTML. cache-control-headers = true #### Routing # SPA-style fallback: serve index.html when a path is not found on disk, # mirroring the previous nginx `try_files $uri $uri/ /index.html`. page-fallback = "/public/index.html" #### Security # Security headers are set by the upstream reverse proxy, so they are # disabled here to avoid duplicate/conflicting headers. Let one layer own # the security posture. Re-enable if SWS is exposed without such a proxy. security-headers = false # Health endpoint at /health for container/K8s liveness probes health = true