basic HTTP-only config