From 3901af81597e2eaaab2aa3249b3a3fc077237b18 Mon Sep 17 00:00:00 2001
From: La sif serveur <david.beniamine@tetras-libre.fr>
Date: Tue, 12 Jan 2021 10:03:33 +0100
Subject: [PATCH] Use hardening middleware from traefik
---
docker-compose.yml | 9 +--------
1 file changed, 1 insertion(+), 8 deletions(-)
diff --git a/docker-compose.yml b/docker-compose.yml
index 208e46e..230da1a 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -75,17 +75,10 @@ services:
- "traefik.http.routers.nextcloud.rule=Host(`${HOST}`)"
- "traefik.http.routers.nextcloud.tls.certresolver=myresolver"
- "traefik.http.routers.nextcloud.entrypoints=web,websecure"
- - "traefik.http.routers.nextcloud.middlewares=nextcloud-caldav@docker,nextcloud-hardening@docker"
+ - "traefik.http.routers.nextcloud.middlewares=nextcloud-caldav@docker,hardening@docker"
- "traefik.http.middlewares.nextcloud-caldav.redirectregex.permanent=true"
- "traefik.http.middlewares.nextcloud-caldav.redirectregex.regex=^https://(.*)/.well-known/(card|cal)dav"
- "traefik.http.middlewares.nextcloud-caldav.redirectregex.replacement=https://$${1}/remote.php/dav/"
- - "traefik.http.middlewares.nextcloud-hardening.headers.sslredirect=true"
- - "traefik.http.middlewares.nextcloud-hardening.headers.forceSTSHeader=true"
- - "traefik.http.middlewares.nextcloud-hardening.headers.stsIncludeSubdomains=true"
- - "traefik.http.middlewares.nextcloud-hardening.headers.stsSeconds=15552000"
- - "traefik.http.middlewares.nextcloud-hardening.headers.stsPreload=true"
- - "traefik.http.middlewares.nextcloud-hardening.headers.referrerPolicy=no-referrer"
- - "traefik.http.middlewares.nextcloud-hardening.headers.customFrameOptionsValue=SAMEORIGIN"
volumes:
document_data:
--
GitLab