include the apache httpd configuration

README.md

@@ -163,6 +163,20 @@ Node.js
 SQLITE_DEBUG=vfs,threads,cache mocha
 ```
 
+# Apache httpd configuration fragment
+
+These are all the options required for maximum performance:
+
+```
+<Location "/">
+  Header always append Cross-Origin-Embedder-Policy "require-corp"
+  Header always append Cross-Origin-Opener-Policy: "same-origin"
+  AddOutputFilterByType DEFLATE application/wasm
+</Location>
+```
+
+They must be set on the origin - the main entry point as it is displayed in the user's URL bar. When using an `iframe`, the `iframe` must have them **as well as all of its parents up to the origin**, as well as the special `iframe` attribute: `<iframe allow="cross-origin-isolated">`.
+
 # Copyright
 
 ISC License