your-production-domain.com {
    encode gzip

    handle_path /static/* {
        root * /srv/static
        file_server {
            precompressed br gzip
        }
    }

    handle_path /media/* {
        root * /srv/media
        file_server
    }

    handle {
        reverse_proxy web:8000
    }

    log {
        output file /var/log/caddy/access.log {
            roll_size 10mb
            roll_keep 10
        }
        format json
    }

    header {
        X-Content-Type-Options nosniff
        X-Frame-Options DENY
        X-XSS-Protection "1; mode=block"
        Referrer-Policy strict-origin-when-cross-origin
        Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
    }
}