{
    "listen": ":8443",
    "protocol": "http+https",
    "tls": {
        "certificate": "fullchain.pem",
        "certificate-key": "private.key",
        "min-protocol-version": "TLSv1",
        "ciphers": [
            "ECDHE_RSA_WITH_AES_256_GCM_SHA384",
            "ECDHE_RSA_WITH_AES_256_CBC_SHA",
            "RSA_WITH_AES_256_GCM_SHA384",
            "RSA_WITH_AES_256_CBC_SHA"
        ],
        "prefer-server-ciphers": true,
        "ecdh-curves": [
            "secp521r1",
            "secp384r1",
            "secp256r1"
        ],
        "session-tickets": true,
        "session-ticket-key": "123456789012345678901234567890123456789012345678901234567890ABCD"
    },
    "connect": "https://live.helsinki.at:8088",
    "request_header": [
        { "op": "del", "header": "X-Forwarded-For" }
    ],
    "response_header": [
        { "op": "set", "header": "Cache-Control", "value": "no-cache" },
        { "op": "add", "header": "Cache-Control", "value": "no-store" },
        { "op": "add", "header": "Cache-Control", "value": "must-revalidate" },
        { "op": "add", "header": "Cache-Control", "value": "max-age=0" },
        { "op": "time", "header": "Expires", "value": "-1s" }
    ]
}