Update Proxy_Containers/traefik/config.yaml

2026-05-14 03:21:52 +00:00
parent 1df661d099
commit 48e28318c0
1 changed files with 13 additions and 1 deletions
@@ -3,4 +3,16 @@ http:
    crowdsec-bouncer:
      forwardAuth:
        address: http://bouncer-traefik:8080/api/v1/forwardAuth
-        trustForwardHeader: true
+        trustForwardHeader: true
+
+    security-headers:
+      headers:
+        stsSeconds: 31536000
+        stsIncludeSubdomains: true
+        stsPreload: true
+        forceSTSHeader: true
+        contentTypeNosniff: true
+        browserXssFilter: true
+        referrerPolicy: "strict-origin-when-cross-origin"
+        permissionsPolicy: "camera=(), microphone=(), geolocation=()"
+        customFrameOptionsValue: "SAMEORIGIN"