rubenhensen/k8scd
1
0
Fork 0
mirror of https://github.com/rubenhensen/k8scd.git synced 2026-09-17 10:22:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add HSTS header and discovery config 10

Browse Source
This commit is contained in:
Ruben Hensen
2025-02-04 14:35:48 +01:00
parent 46de433574
commit fa52dd650c
1 changed files with 26 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/templates/nextcloud-helm.yaml
+26 -26
View File
@@ -40,7 +40,7 @@ spec:
proxy.config.php: |
<?php
$CONFIG = array (
'trusted_proxies' => ['10.0.0.0/8'],
'trusted_proxies' => ['10.0.0.0/8', '192.168.1.1/32'],
);
phpClientHttpsFix:
enabled: true
@@ -54,31 +54,31 @@ spec:
more_set_headers "Strict-Transport-Security: max-age=15552000; includeSubDomains";
# kubernetes.io/tls-acme: "true"
cert-manager.io/cluster-issuer: prod-cluster-issuer
# # Keep this in sync with the README.md:
nginx.ingress.kubernetes.io/server-snippet: |
server_tokens off
proxy_hide_header X-Powered-By;
rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last;
rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last;
rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json;
location = /.well-known/carddav {
return 301 $scheme://$host/remote.php/dav;
}
location = /.well-known/caldav {
return 301 $scheme://$host/remote.php/dav;
}
location = /robots.txt {
allow all;
log_not_found off;
access_log off;
}
location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
deny all;
}
location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
deny all;
}
# # Keep this in sync with the README.md:
# nginx.ingress.kubernetes.io/server-snippet: |
# server_tokens off
# proxy_hide_header X-Powered-By;
# rewrite ^/.well-known/webfinger /index.php/.well-known/webfinger last;
# rewrite ^/.well-known/nodeinfo /index.php/.well-known/nodeinfo last;
# rewrite ^/.well-known/host-meta /public.php?service=host-meta last;
# rewrite ^/.well-known/host-meta.json /public.php?service=host-meta-json;
# location = /.well-known/carddav {
# return 301 $scheme://$host/remote.php/dav;
# }
# location = /.well-known/caldav {
# return 301 $scheme://$host/remote.php/dav;
# }
# location = /robots.txt {
# allow all;
# log_not_found off;
# access_log off;
# }
# location ~ ^/(?:build|tests|config|lib|3rdparty|templates|data)/ {
# deny all;
# }
# location ~ ^/(?:autotest|occ|issue|indie|db_|console) {
# deny all;
# }
tls:
- secretName: nextcloud-tls
hosts: