h2o.yaml

max-delegations: 5 # default - do not set a different number!
hosts:
  "riverwood.lan:80":
    listen:
      port: 80
    paths:
      "/":
        redirect: https://riverwood.lan
  "riverwood.lan:443":
    listen:
      port: 443
      ssl:
        key-file: key.pem
        certificate-file: cert.pem
        min-version: TLSv1.2
    compress: ON
    file.send-compressed: ON
    file.mime.addtypes:
      "application/javascript; charset=utf-8": .js
      "text/css; charset=utf-8": .css
      "text/html; charset=utf-8": .html
    file.dirlisting: OFF
    paths:
      "/":
        - reproxy: ON
          mruby.handler-file: mrb/root.rb
        - proxy.preserve-host: ON
          proxy.reverse.url: "http://127.0.0.1:6969/"
      "/__as__/":
        - mruby.handler-file: mrb/as.rb
        - header.add: "x-content-type-options: nosniff"
          file.dir: priv/static/
      "/__out__/":
        - mruby.handler-file: mrb/out.rb
        - header.add: 'link: <https://pubsubhubbub.superfeedr.com/>; rel="hub", </__webmention__>; rel="webmention", </__micropub__>; rel="micropub", </__auth__/authorize>; rel="authorization_endpoint", </__auth__/token>; rel="token_endpoint"'
          header.add: "strict-transport-security: max-age=31536000"
          header.add: "feature-policy: unsized-media 'none'; sync-xhr 'none'; document-write 'none'"
          header.add: "referrer-policy: strict-origin"
          header.add: "x-content-type-options: nosniff"
          file.dir: out/
      # https://github.com/snarfed/bridgy/issues/878 → https://issuetracker.google.com/issues/112277350
      "/__crapp_engine__/":
        - mruby.handler-file: mrb/out.rb
        - header.add: 'link: <https://pubsubhubbub.superfeedr.com/>; rel="hub", </__webmention__>; rel="webmention", </__micropub__>; rel="micropub", </__auth__/authorize>; rel="authorization_endpoint", </__auth__/token>; rel="token_endpoint"'
          header.add: "strict-transport-security: max-age=31536000"
          header.add: "feature-policy: unsized-media 'none'; sync-xhr 'none'; document-write 'none'"
          header.add: "referrer-policy: strict-origin"
          header.add: "x-content-type-options: nosniff"
          compress: OFF
          file.send-compressed: OFF
          file.dir: out/