mirror of
https://github.com/ublue-os/forge.git
synced 2025-04-16 19:43:44 +03:00
44 lines
1.3 KiB
YAML
44 lines
1.3 KiB
YAML
---
|
|
http:
|
|
## EXTERNAL ROUTING - Only use if you want to proxy something manually ##
|
|
routers:
|
|
## SERVICES ##
|
|
services:
|
|
## MIDDLEWARES ##
|
|
middlewares:
|
|
securityHeaders:
|
|
headers:
|
|
customResponseHeaders:
|
|
X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex"
|
|
X-Forwarded-Proto: "https"
|
|
server: ""
|
|
customRequestHeaders:
|
|
X-Forwarded-Proto: "https"
|
|
sslProxyHeaders:
|
|
X-Forwarded-Proto: "https"
|
|
referrerPolicy: "same-origin"
|
|
hostsProxyHeaders:
|
|
- "X-Forwarded-Host"
|
|
contentTypeNosniff: true
|
|
browserXssFilter: true
|
|
forceSTSHeader: true
|
|
stsIncludeSubdomains: true
|
|
stsSeconds: 63072000
|
|
stsPreload: true
|
|
|
|
# Only use secure ciphers - https://ssl-config.mozilla.org/#server=traefik&version=2.6.0&config=intermediate&guideline=5.6
|
|
tls:
|
|
certificates:
|
|
- certFile: /certs/_.ublue.local/cert.pem
|
|
keyFile: /certs/_.ublue.local/key.pem
|
|
options:
|
|
default:
|
|
minVersion: VersionTLS12
|
|
cipherSuites:
|
|
- TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
|
|
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
|
|
- TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
|
|
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
|
|
- TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
|
|
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
|