{
	frankenphp
}

lamb.test:80 {
	root * src/

	header {
		X-Content-Type-Options nosniff
		Referrer-Policy strict-origin-when-cross-origin
		X-Frame-Options SAMEORIGIN
	}

	# Never execute PHP from the runtime upload directory. See .docker/Caddyfile.release.
	@assets_php path_regexp ^/assets/.*\.(?i:php|phar|phtml)$
	respond @assets_php 404

	# Static assets are content-hash cache-busted (?ver=) or stored under
	# hashed names, so they are safe to cache for a year and immutable.
	@static path /themes/* /scripts/* /assets/*
	header @static Cache-Control "public, max-age=31536000, immutable"

	php_server
}