kris/homelab
kris/homelab
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Add X-Frame-Options header to securehttps

Browse Source
This commit is contained in:
Kris Lamoureux 2020-09-15 23:06:33 -04:00
parent 66dedbcbf7
commit dd8e7d67aa
Signed by: kris
GPG Key ID: 3EDA9C3441EDA925
2 changed files with 2 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/nextcloud/tasks/main.yml
View File

@ -33,7 +33,7 @@
traefik.http.routers.nextcloud.rule: "Host(`{{ nextcloud_domain }}`)" traefik.http.routers.nextcloud.rule: "Host(`{{ nextcloud_domain }}`)"
traefik.http.routers.nextcloud.entrypoints: websecure traefik.http.routers.nextcloud.entrypoints: websecure
traefik.http.routers.nextcloud.tls.certresolver: letsencrypt traefik.http.routers.nextcloud.tls.certresolver: letsencrypt
traefik.http.routers.nextcloud.middlewares: "securehttps@file,nextcloud@file,nextcloud-webdav" traefik.http.routers.nextcloud.middlewares: "securehttps@file,nextcloud-webdav"
traefik.http.middlewares.nextcloud-webdav.redirectregex.regex: "https://(.*)/.well-known/(card|cal)dav" traefik.http.middlewares.nextcloud-webdav.redirectregex.regex: "https://(.*)/.well-known/(card|cal)dav"
traefik.http.middlewares.nextcloud-webdav.redirectregex.replacement: "https://${1}/remote.php/dav/" traefik.http.middlewares.nextcloud-webdav.redirectregex.replacement: "https://${1}/remote.php/dav/"
traefik.http.middlewares.nextcloud-webdav.redirectregex.permanent: "true" traefik.http.middlewares.nextcloud-webdav.redirectregex.permanent: "true"

4
roles/traefik/templates/security.yml.j2
View File

@ -5,9 +5,6 @@ tls:
http: http:
middlewares: middlewares:
nextcloud:
headers:
customFrameOptionsValue: SAMEORIGIN
securehttps: securehttps:
headers: headers:
frameDeny: true frameDeny: true
@ -16,3 +13,4 @@ http:
contentTypeNosniff: true contentTypeNosniff: true
stsPreload: {{ traefik_hsts_preload }} stsPreload: {{ traefik_hsts_preload }}
stsSeconds: {{ traefik_hsts_seconds }} stsSeconds: {{ traefik_hsts_seconds }}
customFrameOptionsValue: SAMEORIGIN