'stdout' => [
    'driver' => 'monolog',
    'level' => env('LOG_LEVEL', 'debug'),
    'handler' => StreamHandler::class,
    'formatter' => env('LOG_STDERR_FORMATTER'),
    'with' => [
        'stream' => 'php://stdout',
    ],
    'processors' => [PsrLogMessageProcessor::class],
],

{
        # The server only runs on port 80 behind a reverse proxy.
        # We don't https.
        auto_https off

        # No reason to add certificates in local dev.
        # Caddy only runs in docker.
        skip_install_trust

        log {
                level {$CADDY_GLOBAL_LOG_LEVEL}
                output stderr
        }

        servers {
           metrics
        }

        frankenphp {
                {$FRANKENPHP_NUM_PHP_THREADS_OPTION}
                worker {
                        file public/frankenphp-worker.php
                        {$CADDY_FRANKENPHP_WORKER_WATCH_OPTIONS}
                        {$FRANKENPHP_NUM_WORKERS_OPTION}
                }
        }
}

http://:80 {
        log {
                level {$CADDY_SERVER_LOG_LEVEL}
                output stderr
        }

        handle /app-ping {
            respond "app pong" 200
        }

       # Security headers
       header {
                # Allow Livewire to work while keeping external requests blocked
                # There is https://github.com/spatie/laravel-csp to further secure this.
                Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'"

                # Prevent MIME type sniffing
                X-Content-Type-Options "nosniff"

                # Prevent iframe embedding
                X-Frame-Options "DENY"

                # Force HTTPS for 2 years, including subdomains
                Strict-Transport-Security "max-age=63072000; includeSubDomains; preload"

                # Send full URL for same-origin, only origin for HTTPS cross-origin, nothing for HTTP
                Referrer-Policy "strict-origin-when-cross-origin"
        }

        @immutable_assets {
                path /build/* /vendor/*
        }
        header @immutable_assets Cache-Control "public, max-age=31536000, immutable"

        route {
                root public

                # Perform compression here, so that we need to send less data to the reverse proxy.
                encode zstd br gzip

                php_server {
                        index frankenphp-worker.php
                        # Required for the public/storage/ directory...
                        resolve_root_symlink
                }
        }
}