{$DOWNLOAD_DOMAIN} {
	root * /srv
	encode zstd gzip
	file_server

	header {
		X-Content-Type-Options nosniff
		Referrer-Policy no-referrer
		X-Frame-Options DENY
		-Server
	}

	@hidden path /.git/* /.env /Caddyfile
	respond @hidden 404
}
