summaryrefslogtreecommitdiff
path: root/src/daq/s5proxy/proxy-only.json
diff options
context:
space:
mode:
Diffstat (limited to 'src/daq/s5proxy/proxy-only.json')
-rw-r--r--src/daq/s5proxy/proxy-only.json34
1 files changed, 34 insertions, 0 deletions
diff --git a/src/daq/s5proxy/proxy-only.json b/src/daq/s5proxy/proxy-only.json
new file mode 100644
index 0000000..8419d76
--- /dev/null
+++ b/src/daq/s5proxy/proxy-only.json
@@ -0,0 +1,34 @@
+{
+ "listen": ":8443",
+ "protocol": "http+https",
+ "tls": {
+ "certificate": "fullchain.pem",
+ "certificate-key": "private.key",
+ "min-protocol-version": "TLSv1",
+ "ciphers": [
+ "ECDHE_RSA_WITH_AES_256_GCM_SHA384",
+ "ECDHE_RSA_WITH_AES_256_CBC_SHA",
+ "RSA_WITH_AES_256_GCM_SHA384",
+ "RSA_WITH_AES_256_CBC_SHA"
+ ],
+ "prefer-server-ciphers": true,
+ "ecdh-curves": [
+ "secp521r1",
+ "secp384r1",
+ "secp256r1"
+ ],
+ "session-tickets": true,
+ "session-ticket-key": "123456789012345678901234567890123456789012345678901234567890ABCD"
+ },
+ "connect": "https://live.helsinki.at:8088",
+ "request_header": [
+ { "op": "del", "header": "X-Forwarded-For" }
+ ],
+ "response_header": [
+ { "op": "set", "header": "Cache-Control", "value": "no-cache" },
+ { "op": "add", "header": "Cache-Control", "value": "no-store" },
+ { "op": "add", "header": "Cache-Control", "value": "must-revalidate" },
+ { "op": "add", "header": "Cache-Control", "value": "max-age=0" },
+ { "op": "time", "header": "Expires", "value": "-1s" }
+ ]
+}