# RustyPanel Caddy Configuration
# Global options
{
    admin off
    email admin@localhost
    auto_https off
}

# Default site
:80 {
    root * /rp/wwwroot/default
    file_server

    # Logging
    log {
        output file /rp/logs/caddy/access.log
        format json
    }

    # Security headers
    header {
        X-Frame-Options "SAMEORIGIN"
        X-Content-Type-Options "nosniff"
        X-XSS-Protection "1; mode=block"
        Referrer-Policy "strict-origin-when-cross-origin"
    }

    # Gzip compression
    encode gzip
}
