kestrove.samialabri.com {
	encode zstd gzip
	root * /srv/site
	header {
		Strict-Transport-Security "max-age=63072000"
		X-Content-Type-Options nosniff
		Referrer-Policy strict-origin-when-cross-origin
		Content-Security-Policy "default-src 'self'; img-src 'self'; style-src 'self'; script-src 'self'; font-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'none'"
		X-Frame-Options DENY
		-Server
	}
	@assets path /assets/*
	header @assets Cache-Control "public, max-age=604800"
	file_server
}