mirror of
https://github.com/Dvorinka/Containr.git
synced 2026-06-04 12:32:58 +00:00
Tomas Dvorak
47 lines
1.2 KiB
YAML
47 lines
1.2 KiB
YAML
# Traefik Dynamic Configuration
|
|
http:
|
|
middlewares:
|
|
secureHeaders:
|
|
headers:
|
|
customRequestHeaders:
|
|
X-Forwarded-Proto: "https"
|
|
customResponseHeaders:
|
|
X-Content-Type-Options: "nosniff"
|
|
X-Frame-Options: "DENY"
|
|
X-XSS-Protection: "1; mode=block"
|
|
Referrer-Policy: "strict-origin-when-cross-origin"
|
|
Permissions-Policy: "camera=(), microphone=(), geolocation=()"
|
|
contentTypeNosniff: true
|
|
browserXssFilter: true
|
|
forceSTSHeader: true
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
stsSeconds: 31536000
|
|
|
|
rateLimit:
|
|
rateLimit:
|
|
average: 100
|
|
burst: 50
|
|
period: "1m"
|
|
|
|
compress:
|
|
compress:
|
|
excludedContentTypes:
|
|
- "text/event-stream"
|
|
minResponseBodyBytes: 1024
|
|
|
|
tls:
|
|
options:
|
|
default:
|
|
minVersion: "VersionTLS12"
|
|
cipherSuites:
|
|
- "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"
|
|
- "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305"
|
|
- "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"
|
|
- "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA"
|
|
- "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA"
|
|
sniStrict: true
|
|
curvePreferences:
|
|
- "CurveP521"
|
|
- "CurveP384"
|