Caddy web server: Caddyfile shared_settings snippet for static webpages

Caddyfile

(shared_settings_static) {
        encode zstd gzip
        file_server {
                precompressed zstd br gzip
        }
        import logging
        header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"
        header X-XSS-Protection "1; mode=block"
        header X-Frame-Options DENY
        header Content-Security-Policy "upgrade-insecure-requests;"
        header Referrer-Policy "no-referrer-when-downgrade"
        header Server "ITisLove"
        header Access-Control-Allow-Origin "https://{host}"
}