Reference

Reference: applications

tenants[].applications

Applications of the tenant.

tenants[].applications[].acme

Obtain and renew a certificate for all domains via ACME (ADR-0018).

tenants[].applications[].cache

Response cache for this application (ADR-0012); absent: no caching.

tenants[].applications[].cache.bypass_cookies

Cookie-name prefixes that mark a personalised request (added to the profile’s).

tenants[].applications[].cache.bypass_paths

Path prefixes that are never cached (added to the profile’s).

tenants[].applications[].cache.bypass_query

Query parameters that disable caching (added to the profile’s).

tenants[].applications[].cache.default_ttl

Freshness for 200 responses that carry no caching headers at all. Default: none (only explicitly cacheable responses are stored).

tenants[].applications[].cache.enabled

Cache this application’s responses.

tenants[].applications[].cache.stale_while_revalidate

Serve stale entries this long while refreshing in the background.

tenants[].applications[].domains

Domains served by the application; *.example.com matches one label, **.example.com one or more; "*" (at most one application per listener) serves the hosts no other domain matches; a domain may be served once per listener.

tenants[].applications[].htaccess

Read Apache .htaccess files below root (ADR-0031).

tenants[].applications[].https_redirect

Answer plain-HTTP requests with a 301 to the same URL over HTTPS (ACME HTTP-01 challenges are still answered over HTTP).

tenants[].applications[].listeners

Listeners (by name) that serve the application; empty: every listener.

tenants[].applications[].name

Application name, unique within the tenant: 1-63 characters of a-z, 0-9, -, _.

tenants[].applications[].profile

Application profile (ADR-0011), e.g. wordpress. Supplies the runtime when runtime is omitted (static profiles only) and defaults such as health checks.

tenants[].applications[].root

Application root directory; default document root for static runtimes.

tenants[].applications[].root_symlinks

Symbolic links in the path of the document roots (root and the runtimes’ own root): follow (default) or refuse. With refuse a root must be an absolute path without ., .. or a symbolic link in any component; it is opened without following links, so the owner of a directory on the way cannot point the site at another directory. For roots inside home directories of other users (hosting panels).

tenants[].applications[].runtime

Handles every request no route matches. Required unless a profile supplies it or routes is not empty; then unmatched requests get 404.

tenants[].applications[].security

Per-application deny paths and rate limits.

tenants[].applications[].security.deny_paths

Denied paths (added to the profile’s); * matches any characters.

tenants[].applications[].security.ignore_profile_rules

Do not apply the profile’s deny rules.

tenants[].applications[].security.rate_limits

Request rates per client address for matching paths (first match applies).

tenants[].applications[].security.rate_limits[].burst

Token-bucket burst (default: equal to the rate).

tenants[].applications[].security.rate_limits[].path

Path prefix the limit applies to.

tenants[].applications[].security.rate_limits[].requests_per_second

Sustained requests per second per client address on this path.