rubenhensen/k8scd
1
0
Fork 0
mirror of https://github.com/rubenhensen/k8scd.git synced 2026-09-17 10:22:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add HSTS header and discovery config 14

Browse Source
This commit is contained in:
Ruben Hensen
2025-02-04 14:56:26 +01:00
parent 8e90a748d4
commit e97f9fa84d
1 changed files with 32 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/templates/nextcloud-helm.yaml
+32 -32
View File
@@ -42,40 +42,40 @@ spec:
$CONFIG = array (
'trusted_proxies' => ['10.0.0.0/8', '192.168.1.1/32'],
);
nginx:
## You need to set an fpm version of the image for nextcloud if you want to use nginx!
enabled: true
# nginx:
# ## You need to set an fpm version of the image for nextcloud if you want to use nginx!
# enabled: true
image:
repository: nginx
tag: alpine
pullPolicy: IfNotPresent
# image:
# repository: nginx
# tag: alpine
# pullPolicy: IfNotPresent
containerPort: 80
# This configures nginx to listen on either IPv4, IPv6 or both
ipFamilies:
- IPv4
# - IPv6
config:
# This generates the default nginx config as per the nextcloud documentation
default: true
headers:
# -- HSTS settings
# WARNING: Only add the preload option once you read about
# the consequences in https://hstspreload.org/. This option
# will add the domain to a hardcoded list that is shipped
# in all major browsers and getting removed from this list
# could take several months.
# Example:
# "Strict-Transport-Security": "max-age=15768000; includeSubDomains; preload;"
"Strict-Transport-Security": "max-age=15768000; includeSubDomains;"
"Referrer-Policy": "no-referrer"
"X-Content-Type-Options": "nosniff"
"X-Download-Options": "noopen"
"X-Frame-Options": "SAMEORIGIN"
"X-Permitted-Cross-Domain-Policies": "none"
"X-Robots-Tag": "noindex, nofollow"
"X-XSS-Protection": "1; mode=block"
# containerPort: 80
# # This configures nginx to listen on either IPv4, IPv6 or both
# ipFamilies:
# - IPv4
# # - IPv6
# config:
# # This generates the default nginx config as per the nextcloud documentation
# default: true
# headers:
# # -- HSTS settings
# # WARNING: Only add the preload option once you read about
# # the consequences in https://hstspreload.org/. This option
# # will add the domain to a hardcoded list that is shipped
# # in all major browsers and getting removed from this list
# # could take several months.
# # Example:
# # "Strict-Transport-Security": "max-age=15768000; includeSubDomains; preload;"
# "Strict-Transport-Security": "max-age=15768000; includeSubDomains;"
# "Referrer-Policy": "no-referrer"
# "X-Content-Type-Options": "nosniff"
# "X-Download-Options": "noopen"
# "X-Frame-Options": "SAMEORIGIN"
# "X-Permitted-Cross-Domain-Policies": "none"
# "X-Robots-Tag": "noindex, nofollow"
# "X-XSS-Protection": "1; mode=block"
phpClientHttpsFix:
enabled: true
protocol: https