feat(all): init

1 files changed, 32 insertions, 0 deletions

diff --git a/etc/relayd.conf b/etc/relayd.conf
new file mode 100644
index 0000000..4348d63
--- /dev/null
+++ b/etc/relayd.conf
@@ -0,0 +1,32 @@
+ip4="193.26.157.243"
+table <www> { 127.0.0.1 }
+log connection
+
+http protocol https {
+    match request header append "X-Forwarded-For" value "$REMOTE_ADDR"
+    match request header append "X-Forwarded-By" \
+        value "$SERVER_ADDR:$SERVER_PORT"
+    match request header set "Connection" value "close"
+    
+    tcp { sack, backlog 128 }
+    tls { keypair iwakura.page }
+
+    match request header "Host" value "iwakura.page" forward to <www>
+    match request header "Host" value "www.iwakura.page" forward to <www>
+
+    match response header append "Strict-Transport-Security" value "max-age=31536000; includeSubDomains; preload"
+    match response header append "Cache-Control" value "public, max-age=86400"
+    match response header append "Content-Security-Policy" value "default-src 'self'; script-src 'self'; object-src 'none';"
+    match response header append "X-Content-Type-Options" value "nosniff"
+    match response header append "X-Frame-Options" value "SAMEORIGIN"
+    match response header append "Referrer-Policy" value "no-referrer"
+    match response header append "Permissions-Policy" value "interest-cohort=()"
+    
+    match request header set "Accept-Encoding" value "gzip, deflate"
+}
+
+relay wwwtls {
+        listen on $ip4 port 443 tls
+        protocol https
+        forward to <www> port 8080 check icmp
+}