(feat) force STS when using Traefik globally and set x-forwarded-proto

charts/stable/traefik/Chart.yaml

@@ -22,4 +22,4 @@ sources:
 - https://github.com/traefik/traefik-helm-chart
 - https://traefik.io/
 type: application
-version: 9.0.4
+version: 9.0.5

charts/stable/traefik/templates/middlewares/basic-middleware.yaml

@@ -38,14 +38,16 @@ spec:
       - PUT
     accessControlMaxAge: 100
     sslRedirect: true
-    # stsSeconds: 63072000
+    stsSeconds: 63072000
     # stsIncludeSubdomains: false
     # stsPreload: false
-    # forceSTSHeader: true
+    forceSTSHeader: true
     contentTypeNosniff: true
     browserXssFilter: true
     sslForceHost: true
     referrerPolicy: same-origin
+    customrequestheaders:
+      X-Forwarded-Proto: "https"
     customResponseHeaders:
       X-Robots-Tag: 'none'
       server: ''

charts/stable/traefik/templates/middlewares/tc-nextcloud.yaml

@@ -6,16 +6,6 @@
 ---
 apiVersion: traefik.containo.us/v1alpha1
 kind: Middleware
-metadata:
-  name: tc-nextcloud-headers
-  namespace: {{ $namespace }}
-spec:
-  headers:
-    stsSeconds: 63072000
-    forceSTSHeader: true
----
-apiVersion: traefik.containo.us/v1alpha1
-kind: Middleware
 metadata:
   name: tc-nextcloud-redirectregex-dav
   namespace: {{ $namespace }}
@@ -32,5 +22,4 @@ metadata:
 spec:
   chain:
     middlewares:
-    - name: tc-nextcloud-headers
     - name: tc-nextcloud-redirectregex-dav