From 9188d6fdcbc4306be1d9f74b532ef0034768f4cd Mon Sep 17 00:00:00 2001
From: Bob Mottram <bob@freedombone.net>
Date: Tue, 12 Nov 2019 21:50:15 +0000
Subject: [PATCH] Caddy web server configuration

---
 README.md          |  2 ++
 caddy.example.conf | 23 +++++++++++++++++++++++
 website/index.html |  3 +++
 3 files changed, 28 insertions(+)
 create mode 100644 caddy.example.conf

diff --git a/README.md b/README.md
index 2afa62b0c..d30e3055f 100644
--- a/README.md
+++ b/README.md
@@ -177,6 +177,8 @@ And restart the web server:
 systemctl restart nginx
 ```
 
+If you are using the [Caddy web server](https://caddyserver.com) then see *caddy.example.conf*
+
 ## Running Unit Tests
 
 To run the unit tests:
diff --git a/caddy.example.conf b/caddy.example.conf
new file mode 100644
index 000000000..9029bf000
--- /dev/null
+++ b/caddy.example.conf
@@ -0,0 +1,23 @@
+# Caddy configuration file for running epicyon on example.com
+
+example.com {
+  tls {
+    # Valid values are rsa2048, rsa4096, rsa8192, p256, and p384.
+    # Default is currently p256.
+    key_type p384
+  }
+  header / Strict-Transport-Security "max-age=31556925"
+  header / X-Content-Type-Options "nosniff"
+  header / X-Download-Options "noopen"
+  header / X-Frame-Options "DENY"
+  header / X-Permitted-Cross-Domain-Policies "none"
+  header / X-Robots-Tag "noindex,nofollow,nosnippet,noarchive"
+  header / X-XSS-Protection "1; mode=block"
+
+  proxy / http://localhost:7156 {
+    transparent
+    timeout 10800s
+  }
+}
+
+# eof
diff --git a/website/index.html b/website/index.html
index 1aff979b6..468989b35 100644
--- a/website/index.html
+++ b/website/index.html
@@ -1397,6 +1397,9 @@
     <div class="shell">
       systemctl restart nginx
     </div>
+    <p class="intro">
+      If you are using the <a href="https://caddyserver.com">Caddy web server</a> then see caddy.example.conf
+    </p>
     <p class="intro">
       Now you can navigate to your domain and register an account. The first account becomes the administrator.
     </p>