33 lines
721 B
Plaintext
33 lines
721 B
Plaintext
|
# Run 'man hitch.conf' for a description of all options.
|
||
|
|
|
||
|
|
frontend = {
|
||
|
|
host = "*"
|
||
|
|
port = "443"
|
||
|
|
}
|
||
|
|
backend = "[127.0.0.1]:8443"
|
||
|
|
workers = 4 # number of CPU cores
|
||
|
|
|
||
|
|
daemon = on
|
||
|
|
|
||
|
|
# We strongly recommend you create a separate non-privileged hitch
|
||
|
|
# user and group
|
||
|
|
user = "hitch"
|
||
|
|
group = "hitch"
|
||
|
|
|
||
|
|
# Enable to let clients negotiate HTTP/2 with ALPN. (default off)
|
||
|
|
# alpn-protos = "h2, http/1.1"
|
||
|
|
|
||
|
|
# run Varnish as backend over PROXY; varnishd -a :80 -a localhost:6086,PROXY ..
|
||
|
|
write-proxy-v2 = on # Write PROXY header
|
||
|
|
|
||
|
|
## ssl config
|
||
|
|
pem-dir = "/etc/tls/private"
|
||
|
|
tls-protos = TLSv1.2 TLSv1.3
|
||
|
|
# ocsp
|
||
|
|
ocsp-dir = "/etc/hitch/ocsp"
|
||
|
|
ocsp-verify-staple = on
|
||
|
|
|
||
|
|
syslog = on
|
||
|
|
log-level = 1
|
||
|
|
tcp-fastopen = on
|
