Final changes to traefik and up and running

2023-02-15 15:15:33 -05:00
parent 901199d2b7
commit 76b2dccc5e
15 changed files with 101 additions and 36 deletions
--- a/ansible/roles/traefik/templates/conf/middlewares.yml
+++ b/ansible/roles/traefik/templates/conf/middlewares.yml
@@ -0,0 +1,17 @@
+http:
+  middlewares:
+    lan-whitelist:
+      ipWhitelist:
+        sourceRange:
+          - 10.0.0.0/24
+          - 10.67.115.0/24
+
+    secure-headers:
+      headers:
+        customFrameOptionsValue: SAMEORIGIN
+        forceSTSHeader: true
+        stsSeconds: 15552000
+        stsPreload: true
+        customResponseHeaders:
+          Permissions-Policy: interest-cohort() # Opts out of Google's FLoC network. See https://paramdeo.com/blog/opting-your-website-out-of-googles-floc-network
+          X-Robots-Tag: none