fix(traefik): update default security configuration
Signed-off-by: Kjeld Schouten <kjeld@schouten-lebbing.nl>
This commit is contained in:
@@ -19,6 +19,7 @@ spec:
|
|||||||
accessControlMaxAge: 100
|
accessControlMaxAge: 100
|
||||||
browserXssFilter: true
|
browserXssFilter: true
|
||||||
contentTypeNosniff: true
|
contentTypeNosniff: true
|
||||||
|
frameDeny: true
|
||||||
customRequestHeaders:
|
customRequestHeaders:
|
||||||
X-Forwarded-Proto: https
|
X-Forwarded-Proto: https
|
||||||
customResponseHeaders:
|
customResponseHeaders:
|
||||||
@@ -51,6 +52,7 @@ spec:
|
|||||||
browserXssFilter: true
|
browserXssFilter: true
|
||||||
sslForceHost: true
|
sslForceHost: true
|
||||||
referrerPolicy: same-origin
|
referrerPolicy: same-origin
|
||||||
|
Content-Security-Policy: frame-ancestors 'self'; form-action 'self'
|
||||||
customRequestHeaders:
|
customRequestHeaders:
|
||||||
X-Forwarded-Proto: "https"
|
X-Forwarded-Proto: "https"
|
||||||
customResponseHeaders:
|
customResponseHeaders:
|
||||||
|
|||||||
Reference in New Issue
Block a user