# Web Backend - Production Configuration
# Hardened configuration for production deployment

[server]
host = "0.0.0.0"
port = 8080
# Disable development features
debug = false
hot_reload = false
# Worker threads
workers = 4

[form]
description = ""
title = ""

  [form.validation]
  client_validation = true
  show_errors_inline = true
  validate_on_change = true

[output]
format = "json"

[html]
css_framework = "none"
dark_mode = true
inline_styles = false
responsive = true

[submission]
method = "post"
# Required: webhook for production submissions
redirect_on_success = true
redirect_url = "https://example.com/thank-you"
webhook_url = "https://api.example.com/forms"

[security]
# Strict CSRF protection
csrf_enabled = true
# Rate limiting: requests per minute per IP
rate_limit = 100
# Require HTTPS
require_https = true
# Security headers
add_security_headers = true

[logging]
file = "/var/log/typedialog/web.log"
level = "error"

[performance]
# Cache static assets
cache_static = true
cache_ttl = 3600
# Enable gzip compression
enable_compression = true
# Minimum response size for compression (bytes)
compression_threshold = 1024

[tls]
# Optional TLS configuration
cert_path = "/etc/typedialog/cert.pem"
enabled = false
key_path = "/etc/typedialog/key.pem"
