ETag cache
Server-side hash?
Log / audit log?
Prevent directory traversal attacks
Error handling
Reverse proxy to other local servers