---
apiVersion: traefik.containo.us/v1alpha1
kind: Middleware
metadata:
  name: headers-nextcloud
  namespace: kube-system
spec:
  headers:
    stsPreload: true
    forceSTSHeader: true
    contentSecurityPolicy: "default-src 'self' data: 'unsafe-inline';"
...