:80 {
    root * /srv
    encode zstd gzip
    file_server

    @assets path *.css *.js *.woff2 *.woff *.svg *.png *.webp *.jpg *.jpeg *.ico
    header @assets Cache-Control "public, max-age=31536000, immutable"

    @html path *.html
    header @html Cache-Control "public, max-age=300, must-revalidate"
    header @html X-Content-Type-Options "nosniff"
    header @html X-Frame-Options "SAMEORIGIN"
    header @html Referrer-Policy "strict-origin-when-cross-origin"

    handle_errors {
        @404 expression `{err.status_code} == 404`
        rewrite @404 /404.html
        file_server
    }
}