Caddyfile

{
    admin off
}

(wordpress_security) {
	@disallowed {
		not path /wp-includes/ms-files.php
		path /wp-admin/includes/*.php
		path /wp-includes/*.php
		path /wp-config.php
		path /wp-content/uploads/*.php
		path /.user.ini
		path /wp-content/debug.log
		path *.sql
		path *.sqlite
	}
	rewrite @disallowed /index.php
}

(static_header) {
	@static {
		file
		path *.css *.js *.ico *.woff *.woff2
	}
	handle @static {
		header Cache-Control "public, max-age=31536000"
	}

	@static-img {
		file
		path *.gif *.jpg *.jpeg *.png *.svg *.webp *.avif
	}
	handle @static-img {
		header Cache-Control "public, max-age=31536000, immutable"
	}
}

(header_remove) {
	header -Link
	header -Server
	header -X-Pingback
	header -X-Powered-By
}

:80 {
	root * /data/www/default
	encode zstd gzip
	php_fastcgi unix//run/php/php7.4-fpm.sock
	file_server {
		index index.html
	}
	log {
		output file /var/log/caddy/access.log {
			roll_size 100mb
			roll_keep 3
			roll_keep_for 7d
		}
	}
}

import /etc/caddy/conf.d/*.conf