Files
homelab/ansible/preparing-playbook/reza-ansible/roles/repo-server/templates/traefik.yaml.j2

24 lines
606 B
Django/Jinja

http:
middlewares:
security:
headers:
frameDeny: true
contentTypeNosniff: true
browserXssFilter: true
hsts:
headers:
stsSeconds: 31536000
stsIncludeSubdomains: true
stsPreload: true
forceSTSHeader: true
tls:
options:
default:
minVersion: VersionTLS12
maxVersion: VersionTLS13
cipherSuites:
- TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
- TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
- TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
- TLS_AES_256_GCM_SHA384
- TLS_CHACHA20_POLY1305_SHA256