1 files changed, 34 insertions, 0 deletions
diff --git a/src/daq/s5proxy/proxy-only.json b/src/daq/s5proxy/proxy-only.json
new file mode 100644
index 0000000..8419d76
--- /dev/null
+++ b/src/daq/s5proxy/proxy-only.json
@@ -0,0 +1,34 @@
+{
+    "listen": ":8443",
+    "protocol": "http+https",
+    "tls": {
+        "certificate": "fullchain.pem",
+        "certificate-key": "private.key",
+        "min-protocol-version": "TLSv1",
+        "ciphers": [
+            "ECDHE_RSA_WITH_AES_256_GCM_SHA384",
+            "ECDHE_RSA_WITH_AES_256_CBC_SHA",
+            "RSA_WITH_AES_256_GCM_SHA384",
+            "RSA_WITH_AES_256_CBC_SHA"
+        ],
+        "prefer-server-ciphers": true,
+        "ecdh-curves": [
+            "secp521r1",
+            "secp384r1",
+            "secp256r1"
+        ],
+        "session-tickets": true,
+        "session-ticket-key": "123456789012345678901234567890123456789012345678901234567890ABCD"
+    },
+    "connect": "https://live.helsinki.at:8088",
+    "request_header": [
+        { "op": "del", "header": "X-Forwarded-For" }
+    ],
+    "response_header": [
+        { "op": "set", "header": "Cache-Control", "value": "no-cache" },
+        { "op": "add", "header": "Cache-Control", "value": "no-store" },
+        { "op": "add", "header": "Cache-Control", "value": "must-revalidate" },
+        { "op": "add", "header": "Cache-Control", "value": "max-age=0" },
+        { "op": "time", "header": "Expires", "value": "-1s" }
+    ]
+}