From f0763df1287bd55dfd4489b15de49be32c0d120a Mon Sep 17 00:00:00 2001 From: Mohammed Al Sahaf Date: Sat, 21 Mar 2026 04:58:03 +0300 Subject: [PATCH] improve Caddy config docs TLS with Caddy does not require providing the cert and key files. Also, the removal of `Server` header does not add any security nor is it being does for other servers. --- docs/Getting-Started/Reverse-Proxy.md | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/docs/Getting-Started/Reverse-Proxy.md b/docs/Getting-Started/Reverse-Proxy.md index 9e517414..90adb9e6 100644 --- a/docs/Getting-Started/Reverse-Proxy.md +++ b/docs/Getting-Started/Reverse-Proxy.md @@ -13,12 +13,10 @@ http://romm.mysite.com { ### Caddy + TLS (HTTPS) ```caddyfile -https://romm.mysite.com { - tls mysite.com.crt mysite.com.key # Certificate and key files - +romm.mysite.com { encode zstd gzip - header * { + header { Strict-Transport-Security "max-age=31536000;" X-XSS-Protection "1; mode=block" X-Frame-Options "SAMEORIGIN"