diff options
-rw-r--r-- | data.d/k3s-master/manifests.d/mieshu/kube-system/treafik/middleware-headers-nextcloud.yaml | 12 | ||||
-rw-r--r-- | data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml | 1 |
2 files changed, 13 insertions, 0 deletions
diff --git a/data.d/k3s-master/manifests.d/mieshu/kube-system/treafik/middleware-headers-nextcloud.yaml b/data.d/k3s-master/manifests.d/mieshu/kube-system/treafik/middleware-headers-nextcloud.yaml new file mode 100644 index 0000000..e3b4179 --- /dev/null +++ b/data.d/k3s-master/manifests.d/mieshu/kube-system/treafik/middleware-headers-nextcloud.yaml @@ -0,0 +1,12 @@ +--- +apiVersion: traefik.containo.us/v1alpha1 +kind: Middleware +metadata: + name: headers-nextcloud + namespace: kube-system +spec: + headers: + stsPreload: true + forceSTSHeader: true + contentSecurityPolicy: "default-src 'self' data: 'unsafe-inline';" +... diff --git a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml index 106926f..ac616a0 100644 --- a/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml +++ b/data.d/k3s-master/manifests.d/mieshu/personal-services/nextcloud/ingress.yaml @@ -11,6 +11,7 @@ metadata: app.kubernetes.io/part-of: personal-services annotations: cert-manager.io/cluster-issuer: "letsencrypt-production" + traefik.ingress.kubernetes.io/router.middlewares: kube-system-headers-nextcloud@kubernetescrd spec: ingressClassName: traefik tls: |