diff --git a/03frontends.cfg b/03frontends.cfg index 9ab9a16..325c32f 100644 --- a/03frontends.cfg +++ b/03frontends.cfg @@ -311,7 +311,6 @@ frontend frontend_default acl laminar hdr(host) -i laminar.benoit.jp.net acl linkding hdr(host) -i linkding.benoit.jp.net acl mailcow hdr(host) -i mail.benoit.jp.net - acl mailcow-backup hdr(host) -i mail-backup.benoit.jp.net acl mastodon hdr(host) -i mastodon.benoit.jp.net acl miniflux hdr(host) -i miniflux.benoit.jp.net acl navidrome hdr(host) -i navidrome.benoit.jp.net @@ -328,7 +327,6 @@ frontend frontend_default http-request deny if beszel !letsencrypt !allowed_ips http-request deny if kanboard !letsencrypt !allowed_ips http-request deny if mailcow !letsencrypt !allowed_ips - http-request deny if mailcow-backup !letsencrypt !allowed_ips http-request deny if miniflux !letsencrypt !allowed_ips http-request deny if navidrome !JP !letsencrypt !allowed_ips http-request deny if photoprism !JP !FR !letsencrypt !allowed_ips diff --git a/05backends.cfg b/05backends.cfg index 5c69848..7f1228a 100644 --- a/05backends.cfg +++ b/05backends.cfg @@ -138,16 +138,6 @@ backend mailcow http-response set-header Cross-Origin-Resource-Policy "same-origin" server mailcow mailcow.incus:80 check -backend mailcow-backup - # set HSTS for one year after all responses - http-response set-header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" - # add some Security headers - http-response set-header X-Frame-Options "SAMEORIGIN" - http-response set-header X-Content-Type-Options "nosniff" - http-response set-header Referrer-Policy "strict-origin-when-cross-origin" - http-response set-header Cross-Origin-Resource-Policy "same-origin" - server mailcow-backup mxmon:443 check ssl verify none - backend beszel # set HSTS for one year after all responses http-response set-header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"