docs: update Go version and timeout defaults for v1.0.0

- Bump Go requirement from 1.23+ to 1.26+ in README, USER_GUIDE, CLI docs
- Update ReadTimeout/WriteTimeout 30s→10s, IdleTimeout 120s→75s in README
  DoS table, README config reference table, USER_GUIDE inline config snippet,
  and both config.toml.example files (root + embedded cmd copy)
- Update USER_GUIDE Docker example FROM golang:1.23-alpine to golang:1.26-alpine

Author: jkyberneees

CLI.md

@@ -279,7 +279,7 @@ static-web version
 go install github.com/static-web/server/cmd/static-web@latest
 ```
 
-Requires Go 1.23+. Installs to `$(go env GOPATH)/bin/static-web`. Add `$(go env GOPATH)/bin` to your `PATH` if not already there.
+Requires Go 1.26+. Installs to `$(go env GOPATH)/bin/static-web`. Add `$(go env GOPATH)/bin` to your `PATH` if not already there.
 
 ### 2. Homebrew (macOS / Linux)
 

README.md

@@ -24,7 +24,7 @@ A production-grade, high-performance static web file server written in Go. Zero
 ## Quick Start
 
 ```bash
-# Go install (requires Go 1.23+)
+# Go install (requires Go 1.26+)
 go install github.com/static-web/server/cmd/static-web@latest
 
 # Serve the current directory
@@ -195,8 +195,8 @@ Only `GET`, `HEAD`, and `OPTIONS` are accepted. All other methods (including `TR
 | Mitigation | Value |
 |------------|-------|
 | `ReadHeaderTimeout` | 5 s (Slowloris) |
-| `ReadTimeout` | 30 s |
-| `WriteTimeout` | 30 s |
+| `ReadTimeout` | 10 s |
+| `WriteTimeout` | 10 s |
 | `MaxHeaderBytes` | 8 KiB |
 
 ---
@@ -214,9 +214,9 @@ Copy `config.toml.example` to `config.toml` and edit as needed. The server start
 | `tls_cert` | string | — | Path to TLS certificate (PEM) |
 | `tls_key` | string | — | Path to TLS private key (PEM) |
 | `read_header_timeout` | duration | `5s` | Slowloris protection |
-| `read_timeout` | duration | `30s` | Full request read deadline |
-| `write_timeout` | duration | `30s` | Response write deadline |
-| `idle_timeout` | duration | `120s` | Keep-alive idle timeout |
+| `read_timeout` | duration | `10s` | Full request read deadline |
+| `write_timeout` | duration | `10s` | Response write deadline |
+| `idle_timeout` | duration | `75s` | Keep-alive idle timeout |
 | `shutdown_timeout` | duration | `15s` | Graceful drain window |
 
 ### `[files]`
@@ -358,7 +358,7 @@ make precompress   # runs gzip and brotli on all .js/.css/.html/.json/.svg
 
 ### Prerequisites
 
-- Go 1.23+
+- Go 1.26+
 - GNU Make
 
 ### Commands

USER_GUIDE.md

@@ -33,7 +33,7 @@ This guide covers everything you need to get `static-web` running in production
 ### From source
 
 ```bash
-# requires Go 1.23+
+# requires Go 1.26+
 git clone https://github.com/static-web/server.git
 cd server
 make build          # produces bin/static-web
@@ -113,9 +113,9 @@ tls_addr         = ":8443"       # HTTPS listen address (requires tls_cert + tls
 tls_cert         = ""            # path to PEM certificate file
 tls_key          = ""            # path to PEM private key file
 read_header_timeout = "5s"       # Slowloris protection
-read_timeout        = "30s"
-write_timeout       = "30s"
-idle_timeout        = "120s"
+read_timeout        = "10s"
+write_timeout       = "10s"
+idle_timeout        = "75s"
 shutdown_timeout    = "15s"      # graceful drain window on SIGTERM/SIGINT
 
 [files]
@@ -332,7 +332,7 @@ Multi-stage build — the final image is scratch-based (~7 MB).
 # syntax=docker/dockerfile:1
 
 # ── Stage 1: build ──────────────────────────────────────────────────────────
-FROM golang:1.23-alpine AS builder
+FROM golang:1.26-alpine AS builder
 
 WORKDIR /src
 COPY go.mod go.sum ./

cmd/static-web/config.toml.example

@@ -18,13 +18,13 @@ tls_key = ""
 read_header_timeout = "5s"
 
 # Maximum time to read an HTTP request from the client (headers + body).
-read_timeout = "30s"
+read_timeout = "10s"
 
 # Maximum time to write an HTTP response to the client.
-write_timeout = "30s"
+write_timeout = "10s"
 
 # Maximum time an idle keep-alive connection is held open.
-idle_timeout = "120s"
+idle_timeout = "75s"
 
 # How long to wait for in-flight requests to complete during graceful shutdown.
 shutdown_timeout = "15s"

config.toml.example

@@ -18,13 +18,13 @@ tls_key = ""
 read_header_timeout = "5s"
 
 # Maximum time to read an HTTP request from the client (headers + body).
-read_timeout = "30s"
+read_timeout = "10s"
 
 # Maximum time to write an HTTP response to the client.
-write_timeout = "30s"
+write_timeout = "10s"
 
 # Maximum time an idle keep-alive connection is held open.
-idle_timeout = "120s"
+idle_timeout = "75s"
 
 # How long to wait for in-flight requests to complete during graceful shutdown.
 shutdown_timeout = "15s"