36 lines
1.6 KiB
YAML
36 lines
1.6 KiB
YAML
################################################################
|
|
# Middlewares (https://github.com/htpcBeginner/docker-traefik/blob/master/appdata/traefik2/rules/cloudserver/middlewares.yml)
|
|
# 2024 update: https://github.com/htpcBeginner/docker-traefik/tree/master/appdata/traefik3/rules/hs
|
|
# https://www.smarthomebeginner.com/traefik-docker-compose-guide-2022/
|
|
#
|
|
# Dynamic configuration
|
|
################################################################
|
|
http:
|
|
middlewares:
|
|
################################################################
|
|
# Good Basic Security Practices
|
|
################################################################
|
|
http-mw-secureHeaders:
|
|
headers:
|
|
accessControlAllowMethods:
|
|
- GET
|
|
- OPTIONS
|
|
- PUT
|
|
accessControlMaxAge: 100
|
|
hostsProxyHeaders:
|
|
- "X-Forwarded-Host"
|
|
stsSeconds: 63072000 # 2 years
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
forceSTSHeader: true
|
|
#customFrameOptionsValue: "allow-from https:{{env "DOMAINNAME"}}" #CSP takes care of this but may be needed for organizr.
|
|
customFrameOptionsValue: SAMEORIGIN # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
|
|
contentTypeNosniff: true
|
|
browserXssFilter: true
|
|
# sslForceHost: true # add sslHost to all of the services
|
|
# sslHost: "{{env "DOMAINNAME"}}"
|
|
referrerPolicy: "same-origin"
|
|
permissionsPolicy: "camera=(), microphone=(), geolocation=(), payment=(), usb=()"
|
|
customResponseHeaders:
|
|
X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex,"
|
|
server: "" |