Caddy WebServer configuration for Wordpress

Caddyfile

example.org www.example.org {
  tls username@example.org # Email for Let's Encrypt
  root /var/www
  gzip
  fastcgi / /run/php/php7.2-fpm.sock php {
    except /wp-content/upload
  }
  rewrite {
    if {path} not_match ^\/wp-admin
    if {path} not_match ^\/wp-includes
    if {path} not_match ^\/wp-content
    to {path} {path}/ /index.php?{query}
  }
  log / /var/log/caddy/example.org_access.log "{combined}" {
    rotate_size 100 # rotate after 100 MB
    rotate_age  14  # keep log files for 14 days
    rotate_keep 10  # keep at most 10 log files
    rotate_compress
  }
  errors /var/log/caddy/example.org_errors.log {
    rotate_size 100 # rotate after 100 MB
    rotate_age  14  # keep log files for 14 days
    rotate_keep 10  # keep at most 10 log files
    rotate_compress
  }
  ratelimit /wp-login.php 5 7 minute
  header /wp-content Cache-Control "max-age=15768000, s-maxage=86400"
  header /wp-includes Cache-Control "max-age=15768000, s-maxage=86400"
  header / {
    Strict-Transport-Security "max-age=31536000; preload"
    X-XSS-Protection "1; mode=block"
    X-Content-Type-Options "nosniff"
    X-Frame-Options "SAMEORIGIN"
    Referrer-Policy "no-referrer-when-downgrade"
  }
}