This commit is contained in:
Benoit 2025-02-14 22:36:42 +09:00
parent 2058689e10
commit d29d08d324
Signed by: Benoit
SSH key fingerprint: SHA256:kFsX94Kq6z/6CY0dX+7/FpAeJC0QlMhJVY+B7NYrOmA
2 changed files with 13 additions and 0 deletions

View file

@ -313,6 +313,8 @@ frontend frontend_default
acl miniflux hdr(host) -i miniflux.benoit.jp.net
acl photoprism hdr(host) -i photoprism.benoit.jp.net
acl vaultwarden hdr(host) -i vaultwarden.benoit.jp.net
acl www hdr(host) -i www.benoit.jp.net
acl www hdr(host) -i benoit.jp.net
http-request deny if adguard !JP !SG !letsencrypt
http-request deny if kanboard !JP !SG !letsencrypt
@ -331,5 +333,6 @@ frontend frontend_default
use_backend miniflux if miniflux
use_backend photoprism if photoprism
use_backend vaultwarden if vaultwarden
use_backend www if www
default_backend default

View file

@ -104,3 +104,13 @@ backend miniflux
http-response set-header Referrer-Policy "strict-origin-when-cross-origin"
http-response set-header Cross-Origin-Resource-Policy "same-origin"
server miniflux miniflux.incus:8080 check
backend www
# set HSTS for one year after all responses
http-response set-header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
# add some Security headers
http-response set-header X-Frame-Options "SAMEORIGIN"
http-response set-header X-Content-Type-Options "nosniff"
http-response set-header Referrer-Policy "strict-origin-when-cross-origin"
http-response set-header Cross-Origin-Resource-Policy "same-origin"
server www www.incus:80 check