35 lines
1.0 KiB
Django/Jinja
35 lines
1.0 KiB
Django/Jinja
# ------------------------------------------------------------------------------
|
|
# Traefik Dynamic Configuration
|
|
# Managed by Ansible — do not edit manually
|
|
# ------------------------------------------------------------------------------
|
|
|
|
http:
|
|
{% if traefik_security_headers %}
|
|
middlewares:
|
|
security-headers:
|
|
headers:
|
|
browserXssFilter: true
|
|
contentTypeNosniff: true
|
|
frameDeny: true
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
stsSeconds: 31536000
|
|
customFrameOptionsValue: "SAMEORIGIN"
|
|
customResponseHeaders:
|
|
X-Robots-Tag: "noindex,nofollow,nosnippet,noarchive,notranslate,noimageindex"
|
|
server: ""
|
|
X-Forwarded-Proto: "https"
|
|
{% endif %}
|
|
|
|
tls:
|
|
options:
|
|
default:
|
|
minVersion: VersionTLS12
|
|
cipherSuites:
|
|
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
|
|
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
|
|
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
|
|
- TLS_AES_128_GCM_SHA256
|
|
- TLS_AES_256_GCM_SHA384
|
|
- TLS_CHACHA20_POLY1305_SHA256
|