rubenhensen/k8scd
1
0
Fork 0
mirror of https://github.com/rubenhensen/k8scd.git synced 2026-09-18 18:42:56 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add HSTS header and discovery config 12

Browse Source
This commit is contained in:
Ruben Hensen
2025-02-04 14:52:30 +01:00
parent 531d3e0bf4
commit fb03a78d31
1 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
apps/templates/nextcloud-helm.yaml
+7 -2
View File
@@ -42,6 +42,10 @@ spec:
$CONFIG = array ( $CONFIG = array (
'trusted_proxies' => ['10.0.0.0/8', '192.168.1.1/32'], 'trusted_proxies' => ['10.0.0.0/8', '192.168.1.1/32'],
); );
nginx:
config:
headers:
Strict-Transport-Security: "max-age=15768001; includeSubDomains;"
phpClientHttpsFix: phpClientHttpsFix:
enabled: true enabled: true
protocol: https protocol: https
@@ -50,8 +54,8 @@ spec:
className: nginx className: nginx
annotations: annotations:
nginx.ingress.kubernetes.io/proxy-body-size: 100G nginx.ingress.kubernetes.io/proxy-body-size: 100G
nginx.ingress.kubernetes.io/configuration-snippet: | # nginx.ingress.kubernetes.io/configuration-snippet: |
more_set_headers "Strict-Transport-Security: max-age=15768000; includeSubDomains"; # more_set_headers "Strict-Transport-Security: max-age=15768000; includeSubDomains";
# kubernetes.io/tls-acme: "true" # kubernetes.io/tls-acme: "true"
cert-manager.io/cluster-issuer: prod-cluster-issuer cert-manager.io/cluster-issuer: prod-cluster-issuer
# # Keep this in sync with the README.md: # # Keep this in sync with the README.md:
@@ -87,6 +91,7 @@ spec:
path: / path: /
pathType: Prefix pathType: Prefix
syncPolicy: syncPolicy:
syncOptions: syncOptions:
- CreateNamespace=true - CreateNamespace=true