security.json.example

{
  "listen_address": "0.0.0.0",
  "listen_port": 443,
  "document_root": "/var/www/html",
  "index_files": ["index.html"],
  "directory_listing": false,
  "follow_symlinks": false,
  "cache_max_age": 0,
  "server_name": "simple-httpd",
  "worker_threads": 8,
  "http2": true,
  "max_connections": 256,
  "request_timeout_seconds": 15,
  "keep_alive": true,
  "keep_alive_timeout_seconds": 5,
  "max_request_size": 8192,
  "max_header_count": 32,
  "compression": true,
  "compression_min_length": 1024,
  "ssl_cert": "/etc/simple-httpd/tls/fullchain.pem",
  "ssl_key": "/etc/simple-httpd/tls/privkey.pem",
  "hsts": true,
  "hsts_max_age": 31536000,
  "security_headers": true,
  "x_frame_options": "DENY",
  "referrer_policy": "strict-origin-when-cross-origin",
  "csp": "default-src 'self'; style-src 'self' 'unsafe-inline'",
  "allow_methods": ["GET", "HEAD", "OPTIONS"],
  "rate_limit_enabled": true,
  "rate_limit_requests": 60,
  "rate_limit_window_seconds": 60,
  "health_path": "/healthz",
  "metrics_path": "/metrics",
  "log_level": "warn",
  "access_log": "/var/log/simple-httpd/access.log",
  "error_log": "/var/log/simple-httpd/error.log"
}