rubenhensen/k8scd
1
0
Fork 0
mirror of https://github.com/rubenhensen/k8scd.git synced 2026-09-17 10:22:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add HSTS header and discovery config 14

Browse Source
This commit is contained in:
Ruben Hensen
2025-02-04 14:56:26 +01:00
parent 8e90a748d4
commit e97f9fa84d
1 changed files with 32 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/templates/nextcloud-helm.yaml
+32 -32
View File
@@ -42,40 +42,40 @@ spec:
$CONFIG = array ( $CONFIG = array (
'trusted_proxies' => ['10.0.0.0/8', '192.168.1.1/32'], 'trusted_proxies' => ['10.0.0.0/8', '192.168.1.1/32'],
); );
nginx: # nginx:
## You need to set an fpm version of the image for nextcloud if you want to use nginx! # ## You need to set an fpm version of the image for nextcloud if you want to use nginx!
enabled: true # enabled: true
image: # image:
repository: nginx # repository: nginx
tag: alpine # tag: alpine
pullPolicy: IfNotPresent # pullPolicy: IfNotPresent
containerPort: 80 # containerPort: 80
# This configures nginx to listen on either IPv4, IPv6 or both # # This configures nginx to listen on either IPv4, IPv6 or both
ipFamilies: # ipFamilies:
- IPv4 # - IPv4
# - IPv6 # # - IPv6
config: # config:
# This generates the default nginx config as per the nextcloud documentation # # This generates the default nginx config as per the nextcloud documentation
default: true # default: true
headers: # headers:
# -- HSTS settings # # -- HSTS settings
# WARNING: Only add the preload option once you read about # # WARNING: Only add the preload option once you read about
# the consequences in https://hstspreload.org/. This option # # the consequences in https://hstspreload.org/. This option
# will add the domain to a hardcoded list that is shipped # # will add the domain to a hardcoded list that is shipped
# in all major browsers and getting removed from this list # # in all major browsers and getting removed from this list
# could take several months. # # could take several months.
# Example: # # Example:
# "Strict-Transport-Security": "max-age=15768000; includeSubDomains; preload;" # # "Strict-Transport-Security": "max-age=15768000; includeSubDomains; preload;"
"Strict-Transport-Security": "max-age=15768000; includeSubDomains;" # "Strict-Transport-Security": "max-age=15768000; includeSubDomains;"
"Referrer-Policy": "no-referrer" # "Referrer-Policy": "no-referrer"
"X-Content-Type-Options": "nosniff" # "X-Content-Type-Options": "nosniff"
"X-Download-Options": "noopen" # "X-Download-Options": "noopen"
"X-Frame-Options": "SAMEORIGIN" # "X-Frame-Options": "SAMEORIGIN"
"X-Permitted-Cross-Domain-Policies": "none" # "X-Permitted-Cross-Domain-Policies": "none"
"X-Robots-Tag": "noindex, nofollow" # "X-Robots-Tag": "noindex, nofollow"
"X-XSS-Protection": "1; mode=block" # "X-XSS-Protection": "1; mode=block"
phpClientHttpsFix: phpClientHttpsFix:
enabled: true enabled: true
protocol: https protocol: https