updated ansible for lightning-lane

2026-03-07 22:47:37 -06:00
parent 36c2e9540c
commit 344e8dff69
19 changed files with 480 additions and 132 deletions
--- a/ansible/roles/traefik/templates/dynamic.yml.j2
+++ b/ansible/roles/traefik/templates/dynamic.yml.j2
@@ -0,0 +1,34 @@
+# ------------------------------------------------------------------------------
+# Traefik Dynamic Configuration
+# Managed by Ansible — do not edit manually
+# ------------------------------------------------------------------------------
+
+http:
+{% if traefik_security_headers %}
+  middlewares:
+    security-headers:
+      headers:
+        browserXssFilter: true
+        contentTypeNosniff: true
+        frameDeny: true
+        stsIncludeSubdomains: true
+        stsPreload: true
+        stsSeconds: 31536000
+        customFrameOptionsValue: "SAMEORIGIN"
+        customResponseHeaders:
+          X-Robots-Tag: "noindex,nofollow,nosnippet,noarchive,notranslate,noimageindex"
+          server: ""
+          X-Forwarded-Proto: "https"
+{% endif %}
+
+tls:
+  options:
+    default:
+      minVersion: VersionTLS12
+      cipherSuites:
+        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
+        - TLS_AES_128_GCM_SHA256
+        - TLS_AES_256_GCM_SHA384
+        - TLS_CHACHA20_POLY1305_SHA256