Hardening middleware

docker-compose.yml.sample

@@ -25,11 +25,17 @@ services:
 - "traefik.http.routers.traefikapi.service=api@internal"
 - "traefik.http.routers.traefikapi.tls.certresolver=myresolver"
 - "traefik.http.routers.traefikapi.entrypoints=web,websecure"
-      - "traefik.http.routers.traefikapi.middlewares=traefikapi@docker" # uncomment me ,auth"
+- "traefik.http.routers.traefikapi.middlewares=hardening@docker" # uncomment me ,auth"
 # uncomment me - "traefik.http.middlewares.auth.basicauth.users=user:htpassword with $ doubled and final ."
-      - "traefik.http.middlewares.traefikapi.headers.forceSTSHeader=true"
-      - "traefik.http.middlewares.traefikapi.headers.stsIncludeSubdomains=true"
-      - "traefik.http.middlewares.traefikapi.headers.stsSeconds=31536000"
+- "traefik.http.middlewares.hardening.headers.sslredirect=true"
+- "traefik.http.middlewares.hardening.headers.forceSTSHeader=true"
+- "traefik.http.middlewares.hardening.headers.stsIncludeSubdomains=true"
+- "traefik.http.middlewares.hardening.headers.stsSeconds=15552000"
+- "traefik.http.middlewares.hardening.headers.stsPreload=true"
+- "traefik.http.middlewares.hardening.headers.referrerPolicy=no-referrer"
+- "traefik.http.middlewares.hardening.headers.customFrameOptionsValue=SAMEORIGIN"
+
+
 
 
 networks: