ahmza
498231c160
The site sits behind a reverse proxy that already handles compression and security headers. Disable those in SWS to avoid redundant work and duplicate/conflicting headers, letting each layer own one concern. - compression / compression-static: off (proxy compresses) - security-headers: off (proxy sets them) - cache-control-headers, page-fallback, health: kept (origin concerns)
47 lines
1.4 KiB
TOML
47 lines
1.4 KiB
TOML
[general]
|
|
|
|
#### Server
|
|
|
|
# Listen on all interfaces, port 80 (matches previous nginx setup)
|
|
host = "0.0.0.0"
|
|
port = 80
|
|
|
|
# Root directory of the static site (Hugo `public/` output)
|
|
root = "/public"
|
|
|
|
# Number of worker threads (0 = auto-detect based on CPU cores)
|
|
threads-multiplier = 1
|
|
|
|
# Log level
|
|
log-level = "info"
|
|
|
|
#### Performance / caching
|
|
|
|
# Compression is handled by the upstream reverse proxy, so it is disabled
|
|
# here to avoid doing the work twice (wasted CPU per request). Re-enable if
|
|
# SWS is ever exposed directly without a compressing proxy in front.
|
|
compression = false
|
|
compression-static = false
|
|
|
|
# Emit Cache-Control + ETag headers with sensible per-content-type defaults.
|
|
# The origin is the correct place to declare cacheability; the proxy/CDN
|
|
# passes these through. SWS applies long-lived caching to static assets
|
|
# (images, css, js, fonts) and short/no-cache to HTML.
|
|
cache-control-headers = true
|
|
|
|
#### Routing
|
|
|
|
# SPA-style fallback: serve index.html when a path is not found on disk,
|
|
# mirroring the previous nginx `try_files $uri $uri/ /index.html`.
|
|
page-fallback = "/public/index.html"
|
|
|
|
#### Security
|
|
|
|
# Security headers are set by the upstream reverse proxy, so they are
|
|
# disabled here to avoid duplicate/conflicting headers. Let one layer own
|
|
# the security posture. Re-enable if SWS is exposed without such a proxy.
|
|
security-headers = false
|
|
|
|
# Health endpoint at /health for container/K8s liveness probes
|
|
health = true
|