diff --git a/apps/production/traefik/external-services/aetheria-grafana.fascinated.cc.yml b/apps/production/traefik/external-services/aetheria-grafana.fascinated.cc.yml index 3ac0f72..1adf7d1 100644 --- a/apps/production/traefik/external-services/aetheria-grafana.fascinated.cc.yml +++ b/apps/production/traefik/external-services/aetheria-grafana.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`aetheria-grafana.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: aetheria-grafana-external port: 3000 diff --git a/apps/production/traefik/external-services/aetheria-influx.fascinated.cc.yml b/apps/production/traefik/external-services/aetheria-influx.fascinated.cc.yml index b7b4bd6..0abb8cd 100644 --- a/apps/production/traefik/external-services/aetheria-influx.fascinated.cc.yml +++ b/apps/production/traefik/external-services/aetheria-influx.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`aetheria-influx.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: aetheria-influx-external port: 8086 diff --git a/apps/production/traefik/external-services/analytics.fascinated.cc.yml b/apps/production/traefik/external-services/analytics.fascinated.cc.yml index 8d0380a..75935b2 100644 --- a/apps/production/traefik/external-services/analytics.fascinated.cc.yml +++ b/apps/production/traefik/external-services/analytics.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`analytics.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: analytics-external port: 8000 diff --git a/apps/production/traefik/external-services/api.mcutils.xyz.yml b/apps/production/traefik/external-services/api.mcutils.xyz.yml index caa994b..35657ec 100644 --- a/apps/production/traefik/external-services/api.mcutils.xyz.yml +++ b/apps/production/traefik/external-services/api.mcutils.xyz.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`api.mcutils.xyz`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: mc-utils-api-external port: 80 diff --git a/apps/production/traefik/external-services/azure-metrics.fascinated.cc.yml b/apps/production/traefik/external-services/azure-metrics.fascinated.cc.yml index cf7bd3e..db93dcf 100644 --- a/apps/production/traefik/external-services/azure-metrics.fascinated.cc.yml +++ b/apps/production/traefik/external-services/azure-metrics.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`azure-metrics.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: azure-metrics-external port: 3000 diff --git a/apps/production/traefik/external-services/azure-phpma.fascinated.cc.yml b/apps/production/traefik/external-services/azure-phpma.fascinated.cc.yml index a9ce966..dd1a504 100644 --- a/apps/production/traefik/external-services/azure-phpma.fascinated.cc.yml +++ b/apps/production/traefik/external-services/azure-phpma.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`azure-phpma.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: azure-phpma-external port: 8080 diff --git a/apps/production/traefik/external-services/bitmagnet.local.fascinated.cc.yml b/apps/production/traefik/external-services/bitmagnet.local.fascinated.cc.yml index 5405994..044ff2b 100644 --- a/apps/production/traefik/external-services/bitmagnet.local.fascinated.cc.yml +++ b/apps/production/traefik/external-services/bitmagnet.local.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`bitmagnet.local.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: bitmagnet-local-external port: 3333 diff --git a/apps/production/traefik/external-services/cdn.fascinated.cc.yml b/apps/production/traefik/external-services/cdn.fascinated.cc.yml index 11c1e30..fdb7256 100644 --- a/apps/production/traefik/external-services/cdn.fascinated.cc.yml +++ b/apps/production/traefik/external-services/cdn.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`cdn.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: cdn-external port: 8087 diff --git a/apps/production/traefik/external-services/cloud.fascinated.cc.yml b/apps/production/traefik/external-services/cloud.fascinated.cc.yml index 776cdd1..8045b33 100644 --- a/apps/production/traefik/external-services/cloud.fascinated.cc.yml +++ b/apps/production/traefik/external-services/cloud.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`cloud.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: nextcloud-external port: 80 diff --git a/apps/production/traefik/external-services/docs.fascinated.cc.yml b/apps/production/traefik/external-services/docs.fascinated.cc.yml index 0ac22b0..0050999 100644 --- a/apps/production/traefik/external-services/docs.fascinated.cc.yml +++ b/apps/production/traefik/external-services/docs.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`docs.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: docs-external port: 80 diff --git a/apps/production/traefik/external-services/fascinated.cc.yml b/apps/production/traefik/external-services/fascinated.cc.yml index 86a1e3a..34446ac 100644 --- a/apps/production/traefik/external-services/fascinated.cc.yml +++ b/apps/production/traefik/external-services/fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: main-site-external port: 3000 diff --git a/apps/production/traefik/external-services/git.fascinated.cc.yml b/apps/production/traefik/external-services/git.fascinated.cc.yml index af8d541..c614718 100644 --- a/apps/production/traefik/external-services/git.fascinated.cc.yml +++ b/apps/production/traefik/external-services/git.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`git.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: git-external port: 3003 diff --git a/apps/production/traefik/external-services/glitchtip.fascinated.cc.yml b/apps/production/traefik/external-services/glitchtip.fascinated.cc.yml index 5fc2b25..6bb8879 100644 --- a/apps/production/traefik/external-services/glitchtip.fascinated.cc.yml +++ b/apps/production/traefik/external-services/glitchtip.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`glitchtip.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: sentry-external port: 8000 diff --git a/apps/production/traefik/external-services/grafana.mcutils.xyz.yml b/apps/production/traefik/external-services/grafana.mcutils.xyz.yml index a335fcb..0adf9f5 100644 --- a/apps/production/traefik/external-services/grafana.mcutils.xyz.yml +++ b/apps/production/traefik/external-services/grafana.mcutils.xyz.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`grafana.mcutils.xyz`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: mc-utils-grafana-external port: 3000 diff --git a/apps/production/traefik/external-services/img.fascinated.cc.yml b/apps/production/traefik/external-services/img.fascinated.cc.yml index fedc957..7f8c9ce 100644 --- a/apps/production/traefik/external-services/img.fascinated.cc.yml +++ b/apps/production/traefik/external-services/img.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`img.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: img-proxy-external port: 8080 diff --git a/apps/production/traefik/external-services/influx.mcutils.xyz.yml b/apps/production/traefik/external-services/influx.mcutils.xyz.yml index 18665ad..caa4614 100644 --- a/apps/production/traefik/external-services/influx.mcutils.xyz.yml +++ b/apps/production/traefik/external-services/influx.mcutils.xyz.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`influx.mcutils.xyz`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: mc-utils-influx-external port: 8086 diff --git a/apps/production/traefik/external-services/kubernetes-grafana.local.fascinated.cc.yml b/apps/production/traefik/external-services/kubernetes-grafana.local.fascinated.cc.yml index deb5ee8..81fb07d 100644 --- a/apps/production/traefik/external-services/kubernetes-grafana.local.fascinated.cc.yml +++ b/apps/production/traefik/external-services/kubernetes-grafana.local.fascinated.cc.yml @@ -11,6 +11,9 @@ spec: routes: - match: Host(`kubernetes-grafana.local.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: kube-prometheus-stack-grafana port: 80 diff --git a/apps/production/traefik/external-services/mastodon.fascinated.cc.yml b/apps/production/traefik/external-services/mastodon.fascinated.cc.yml index 0ffa24f..38ddd13 100644 --- a/apps/production/traefik/external-services/mastodon.fascinated.cc.yml +++ b/apps/production/traefik/external-services/mastodon.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`mastodon.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: mastodon-external port: 3000 diff --git a/apps/production/traefik/external-services/mc-tracker.fascinated.cc.yml b/apps/production/traefik/external-services/mc-tracker.fascinated.cc.yml index b5309c6..43a4131 100644 --- a/apps/production/traefik/external-services/mc-tracker.fascinated.cc.yml +++ b/apps/production/traefik/external-services/mc-tracker.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`mc-tracker.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: mc-tracker-external port: 3000 diff --git a/apps/production/traefik/external-services/mcutils.xyz.yml b/apps/production/traefik/external-services/mcutils.xyz.yml index 6191afd..fc8241f 100644 --- a/apps/production/traefik/external-services/mcutils.xyz.yml +++ b/apps/production/traefik/external-services/mcutils.xyz.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`mcutils.xyz`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: mc-utils-external port: 80 diff --git a/apps/production/traefik/external-services/node-hl-01.fascinated.cc.yml b/apps/production/traefik/external-services/node-hl-01.fascinated.cc.yml index cf2d615..a61224d 100644 --- a/apps/production/traefik/external-services/node-hl-01.fascinated.cc.yml +++ b/apps/production/traefik/external-services/node-hl-01.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`node-hl-01.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: node-hl-01-external port: 443 diff --git a/apps/production/traefik/external-services/obsidian-sync.fascinated.cc.yml b/apps/production/traefik/external-services/obsidian-sync.fascinated.cc.yml index 3f80bcc..00eabc7 100644 --- a/apps/production/traefik/external-services/obsidian-sync.fascinated.cc.yml +++ b/apps/production/traefik/external-services/obsidian-sync.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`obsidian-sync.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: obsidian-sync-external port: 5984 diff --git a/apps/production/traefik/external-services/overseerr.fascinated.cc.yml b/apps/production/traefik/external-services/overseerr.fascinated.cc.yml index 9431deb..0b77ffb 100644 --- a/apps/production/traefik/external-services/overseerr.fascinated.cc.yml +++ b/apps/production/traefik/external-services/overseerr.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`overseerr.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: overseerr-external port: 5055 diff --git a/apps/production/traefik/external-services/owntracks-web.fascinated.cc.yml b/apps/production/traefik/external-services/owntracks-web.fascinated.cc.yml index ba05769..e34a791 100644 --- a/apps/production/traefik/external-services/owntracks-web.fascinated.cc.yml +++ b/apps/production/traefik/external-services/owntracks-web.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`owntracks-web.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: owntracks-web-external port: 6969 diff --git a/apps/production/traefik/external-services/owntracks.fascinated.cc.yml b/apps/production/traefik/external-services/owntracks.fascinated.cc.yml index 35180a6..b896051 100644 --- a/apps/production/traefik/external-services/owntracks.fascinated.cc.yml +++ b/apps/production/traefik/external-services/owntracks.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`owntracks.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: owntracks-external port: 8083 diff --git a/apps/production/traefik/external-services/panel.fascinated.cc.yml b/apps/production/traefik/external-services/panel.fascinated.cc.yml index c34372f..8263c46 100644 --- a/apps/production/traefik/external-services/panel.fascinated.cc.yml +++ b/apps/production/traefik/external-services/panel.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`panel.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: panel-external port: 80 diff --git a/apps/production/traefik/external-services/paste-grafana.local.fascinated.cc.yml b/apps/production/traefik/external-services/paste-grafana.local.fascinated.cc.yml index fcdcd83..af4904a 100644 --- a/apps/production/traefik/external-services/paste-grafana.local.fascinated.cc.yml +++ b/apps/production/traefik/external-services/paste-grafana.local.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`paste-grafana.local.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: paste-grafana-local-external port: 3035 diff --git a/apps/production/traefik/external-services/plex.fascinated.cc.yml b/apps/production/traefik/external-services/plex.fascinated.cc.yml index 0cce9a3..2eba6b0 100644 --- a/apps/production/traefik/external-services/plex.fascinated.cc.yml +++ b/apps/production/traefik/external-services/plex.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`plex.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: plex-external port: 32400 diff --git a/apps/production/traefik/external-services/proxmox.local.fascinated.cc.yml b/apps/production/traefik/external-services/proxmox.local.fascinated.cc.yml index db0e41d..04f493d 100644 --- a/apps/production/traefik/external-services/proxmox.local.fascinated.cc.yml +++ b/apps/production/traefik/external-services/proxmox.local.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`proxmox.local.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: proxmox-luna-local-external port: 8006 diff --git a/apps/production/traefik/external-services/repo.fascinated.cc.yml b/apps/production/traefik/external-services/repo.fascinated.cc.yml index 533f548..39539b2 100644 --- a/apps/production/traefik/external-services/repo.fascinated.cc.yml +++ b/apps/production/traefik/external-services/repo.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`repo.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: repo-external port: 8080 diff --git a/apps/production/traefik/external-services/restic.fascinated.cc.yml b/apps/production/traefik/external-services/restic.fascinated.cc.yml index ef3a8b4..353f428 100644 --- a/apps/production/traefik/external-services/restic.fascinated.cc.yml +++ b/apps/production/traefik/external-services/restic.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`restic.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: restic-backups-external port: 8000 diff --git a/apps/production/traefik/external-services/s.fascinated.cc.yml b/apps/production/traefik/external-services/s.fascinated.cc.yml index 37c62ec..edae090 100644 --- a/apps/production/traefik/external-services/s.fascinated.cc.yml +++ b/apps/production/traefik/external-services/s.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`s.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: slash-external port: 5231 diff --git a/apps/production/traefik/external-services/sonarr-anime.local.fascinated.cc.yml b/apps/production/traefik/external-services/sonarr-anime.local.fascinated.cc.yml index ae5d09d..f0e1e7a 100644 --- a/apps/production/traefik/external-services/sonarr-anime.local.fascinated.cc.yml +++ b/apps/production/traefik/external-services/sonarr-anime.local.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`sonarr-anime.local.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: sonarr-anime-local-external port: 8988 diff --git a/apps/production/traefik/external-services/sonarr.local.fascinated.cc.yml b/apps/production/traefik/external-services/sonarr.local.fascinated.cc.yml index 39f6f46..85298e5 100644 --- a/apps/production/traefik/external-services/sonarr.local.fascinated.cc.yml +++ b/apps/production/traefik/external-services/sonarr.local.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`sonarr.local.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: sonarr-local-external port: 8989 diff --git a/apps/production/traefik/external-services/ssr-staging.fascinated.cc.yml b/apps/production/traefik/external-services/ssr-staging.fascinated.cc.yml index d069c6d..6ae3c2d 100644 --- a/apps/production/traefik/external-services/ssr-staging.fascinated.cc.yml +++ b/apps/production/traefik/external-services/ssr-staging.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`ssr-staging.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: ssr-staging-external port: 80 diff --git a/apps/production/traefik/external-services/status.fascinated.cc.yml b/apps/production/traefik/external-services/status.fascinated.cc.yml index 518be63..86a5b9d 100644 --- a/apps/production/traefik/external-services/status.fascinated.cc.yml +++ b/apps/production/traefik/external-services/status.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`status.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: status-external port: 3001 diff --git a/apps/production/traefik/external-services/subscriptions.fascinated.cc.yml b/apps/production/traefik/external-services/subscriptions.fascinated.cc.yml index 50eaad8..5dd482a 100644 --- a/apps/production/traefik/external-services/subscriptions.fascinated.cc.yml +++ b/apps/production/traefik/external-services/subscriptions.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`subscriptions.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: subscriptions-external port: 8282 diff --git a/apps/production/traefik/external-services/tautulli.fascinated.cc.yml b/apps/production/traefik/external-services/tautulli.fascinated.cc.yml index 0ca54e5..d5917f9 100644 --- a/apps/production/traefik/external-services/tautulli.fascinated.cc.yml +++ b/apps/production/traefik/external-services/tautulli.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`tautulli.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: tautulli-external port: 8181 diff --git a/apps/production/traefik/external-services/tdarr.local.fascinated.cc.yml b/apps/production/traefik/external-services/tdarr.local.fascinated.cc.yml index f37035c..8319dc7 100644 --- a/apps/production/traefik/external-services/tdarr.local.fascinated.cc.yml +++ b/apps/production/traefik/external-services/tdarr.local.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`tdarr.local.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: tdarr-local-external port: 8265 diff --git a/apps/production/traefik/external-services/teleport.fascinated.cc.yml b/apps/production/traefik/external-services/teleport.fascinated.cc.yml index a71e5ba..d46e9d3 100644 --- a/apps/production/traefik/external-services/teleport.fascinated.cc.yml +++ b/apps/production/traefik/external-services/teleport.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`teleport.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: teleport-external port: 3080 diff --git a/apps/production/traefik/external-services/torrent.local.fascinated.cc.yml b/apps/production/traefik/external-services/torrent.local.fascinated.cc.yml index 8560e64..460aed0 100644 --- a/apps/production/traefik/external-services/torrent.local.fascinated.cc.yml +++ b/apps/production/traefik/external-services/torrent.local.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`torrent.local.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: torrent-local-external port: 8080 diff --git a/apps/production/traefik/external-services/translate.fascinated.cc.yml b/apps/production/traefik/external-services/translate.fascinated.cc.yml index 0a25856..be5d11c 100644 --- a/apps/production/traefik/external-services/translate.fascinated.cc.yml +++ b/apps/production/traefik/external-services/translate.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`translate.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: translate-external port: 5000 diff --git a/apps/production/traefik/external-services/tube.fascinated.cc.yml b/apps/production/traefik/external-services/tube.fascinated.cc.yml index 4a36b0d..135a2a7 100644 --- a/apps/production/traefik/external-services/tube.fascinated.cc.yml +++ b/apps/production/traefik/external-services/tube.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`tube.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: tube-external port: 8209 diff --git a/apps/production/traefik/external-services/vaultwarden.fascinated.cc.yml b/apps/production/traefik/external-services/vaultwarden.fascinated.cc.yml index 047631b..a4efc1a 100644 --- a/apps/production/traefik/external-services/vaultwarden.fascinated.cc.yml +++ b/apps/production/traefik/external-services/vaultwarden.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`vaultwarden.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: vaultwarden-external port: 4743 diff --git a/apps/production/traefik/external-services/vencloud.fascinated.cc.yml b/apps/production/traefik/external-services/vencloud.fascinated.cc.yml index c1cb7b1..d9b4373 100644 --- a/apps/production/traefik/external-services/vencloud.fascinated.cc.yml +++ b/apps/production/traefik/external-services/vencloud.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`vencloud.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: vencloud-external port: 8080 diff --git a/apps/production/traefik/external-services/wakatime.fascinated.cc.yml b/apps/production/traefik/external-services/wakatime.fascinated.cc.yml index 2e71356..6a49e1e 100644 --- a/apps/production/traefik/external-services/wakatime.fascinated.cc.yml +++ b/apps/production/traefik/external-services/wakatime.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`wakatime.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: wakatime-external port: 3355 diff --git a/apps/production/traefik/external-services/wazuh.local.fascinated.cc.yml b/apps/production/traefik/external-services/wazuh.local.fascinated.cc.yml index 9992030..251579c 100644 --- a/apps/production/traefik/external-services/wazuh.local.fascinated.cc.yml +++ b/apps/production/traefik/external-services/wazuh.local.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`wazuh.local.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: wazuh-external port: 443 diff --git a/apps/production/traefik/external-services/wiki.fascinated.cc.yml b/apps/production/traefik/external-services/wiki.fascinated.cc.yml index 3a181bb..f16697d 100644 --- a/apps/production/traefik/external-services/wiki.fascinated.cc.yml +++ b/apps/production/traefik/external-services/wiki.fascinated.cc.yml @@ -23,6 +23,9 @@ spec: routes: - match: Host(`wiki.fascinated.cc`) kind: Rule + middlewares: + - name: default-headers + namespace: traefik services: - name: wiki-external port: 80 diff --git a/apps/production/traefik/middlewares/default-headers.yaml b/apps/production/traefik/middlewares/default-headers.yaml new file mode 100644 index 0000000..430be46 --- /dev/null +++ b/apps/production/traefik/middlewares/default-headers.yaml @@ -0,0 +1,18 @@ +apiVersion: traefik.io/v1alpha1 +kind: Middleware +metadata: + name: default-headers + namespace: traefik +spec: + headers: + browserXssFilter: true + contentTypeNosniff: true + forceSTSHeader: true + stsIncludeSubdomains: true + stsPreload: true + stsSeconds: 15552000 + referrerPolicy: no-referrer + contentSecurityPolicy: "default-src 'none'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https:; style-src 'self' 'unsafe-inline' https:; img-src 'self' data: https:; font-src 'self' https: data:; connect-src 'self' https:; frame-src 'self' https:; media-src 'self' https:; object-src 'none'; frame-ancestors 'self'; base-uri 'self'; form-action 'self';" + customFrameOptionsValue: SAMEORIGIN + customRequestHeaders: + X-Forwarded-Proto: https