roundcube with caddy

webmail.domain.com {
	root * /var/www/html/webmail/public_html
	encode zstd gzip
        
        header {
		Strict-Transport-Security max-age=31536000
		Permissions-Policy interest-cohort=()
        Content-Security-Policy "upgrade-insecure-requests"
		X-Content-Type-Options nosniff
		X-Frame-Options SAMEORIGIN
		Referrer-Policy no-referrer-when-downgrade
		X-XSS-Protection "1; mode=block"
		X-Robots-Tag "noindex, nofollow"
		-X-Powered-By
	}

	@forbidden {
		path /SQL/* /bin/* /config/* /logs/* /temp/* /tests/* /vendor/* /gnupg/*
		path /program/include/* /program/lib/* /program/localization/* /program/steps/*
		path /.* /README.* /CHANGELOG.* /SECURITY.* /meta.json /composer.* /INSTALL /LICENSE /UPGRADING
		not path /.well-known/*
	}
	error @forbidden 404

	@immutable {
		path *.ico *.css *.js *.gif *.webp *.avif *.jpg *.jpeg *.png *.svg *.woff *.woff2
		query s=*
	}
	header @immutable Cache-Control "max-age=15778463, immutable"

	@cache {
		path *.ico *.css *.js *.gif *.webp *.avif *.jpg *.jpeg *.png *.svg *.woff *.woff2
		not query s=*
	}
	header @cache Cache-Control "max-age=15778463"
    
	php_fastcgi unix//run/php/php8.5-fpm.sock {
		root /var/www/html/webmail/public_html
	}

	file_server
}