production.conf.example

# simple-httpd — production
# Public HTTPS static hosting. Install certs and document roots before starting.
#
#   ./build/simple-httpd --config /etc/simple-httpd/simple-httpd.conf
#
# Typical layout:
#   /var/www/html              default site
#   /var/www/app.example       Host: app.example
#   /etc/simple-httpd/tls/     fullchain.pem + privkey.pem
#   /var/log/simple-httpd/     access.log + error.log

[server]
listen_address = 0.0.0.0
listen_port = 443
document_root = /var/www/html
index_files = index.html, index.htm
directory_listing = false
follow_symlinks = false
cache_max_age = 86400
server_name = simple-httpd

[performance]
worker_threads = 16
http2 = true
max_connections = 1024
max_connections_per_ip = 64
request_timeout_seconds = 30
keep_alive = true
keep_alive_timeout_seconds = 15
max_request_size = 65536
max_header_count = 100
compression = true
compression_min_length = 256

[ssl]
ssl_cert = /etc/simple-httpd/tls/fullchain.pem
ssl_key = /etc/simple-httpd/tls/privkey.pem
tls_min_version = 1.2
hsts = true
hsts_max_age = 31536000

[logging]
log_level = info
access_log = /var/log/simple-httpd/access.log
error_log = /var/log/simple-httpd/error.log
security_log = /var/log/simple-httpd/security.log

[ops]
health_path = /healthz
metrics_path = /metrics
rate_limit_enabled = true
rate_limit_requests = 120
rate_limit_window_seconds = 60
security_headers = true
allow_methods = GET, HEAD, OPTIONS

[vhost:www.example.com]
document_root = /var/www/html

[vhost:app.example]
document_root = /var/www/app.example

# Optional extras stay off in production unless you need them:
# ssi = false
# cgi_prefix =
# proxy =
# fastcgi =