asepharyana
092c0b363d
- Simplified Dockerfile for scraper by removing unnecessary Node.js installation and optimizing build stages. - Updated Traefik environment configuration to use shorter variable names for certificate paths. - Removed commented-out middleware configurations in dynamic middlewares.yaml. - Cleaned up legacy SSL configurations in ssl.yaml. - Disabled insecure API access in Traefik configuration. - Deleted unused renovate.json file. - Modified update environment script to only process apps directory. - Updated GHCR cleanup script to target specific package. - Streamlined dependency update script to focus on app submodules. - Removed setup script for Prometheus as it is no longer needed.
73 lines
1.7 KiB
YAML
73 lines
1.7 KiB
YAML
http:
|
|
middlewares:
|
|
secure-headers:
|
|
headers:
|
|
sslRedirect: true
|
|
forceSTSHeader: true
|
|
stsSeconds: 31536000
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
frameDeny: true
|
|
contentTypeNosniff: true
|
|
browserXSSFilter: true
|
|
referrerPolicy: 'same-origin'
|
|
customResponseHeaders:
|
|
X-Content-Type-Options: 'nosniff'
|
|
X-Frame-Options: 'DENY'
|
|
X-XSS-Protection: '1; mode=block'
|
|
Referrer-Policy: 'same-origin'
|
|
Permissions-Policy: 'geolocation=(), microphone=(), camera=()'
|
|
compress:
|
|
compress:
|
|
minResponseBodyBytes: 256
|
|
excludedContentTypes:
|
|
- 'image/*'
|
|
- 'application/octet-stream'
|
|
retry:
|
|
retry:
|
|
attempts: 3
|
|
rate-limit:
|
|
rateLimit:
|
|
average: 100
|
|
burst: 50
|
|
buffer:
|
|
buffering:
|
|
maxRequestBodyBytes: 10485760
|
|
maxResponseBodyBytes: 10485760
|
|
memRequestBodyBytes: 1048576
|
|
memResponseBodyBytes: 1048576
|
|
admin-chain:
|
|
chain:
|
|
middlewares:
|
|
- secure-headers
|
|
- compress
|
|
- retry
|
|
|
|
# ── Useful Plugins ──
|
|
real-ip:
|
|
plugin:
|
|
real-ip:
|
|
excludednetworks:
|
|
- '127.0.0.1/32'
|
|
realipheader: 'CF-Connecting-IP'
|
|
|
|
block-sensitive-paths:
|
|
plugin:
|
|
blockpath:
|
|
regex:
|
|
- "^/\\.env"
|
|
- "^/\\.git"
|
|
- '^/wp-admin'
|
|
- "^/wp-login\\.php"
|
|
- "^/config\\.php"
|
|
|
|
# ── Common Chain ──
|
|
common-chain:
|
|
chain:
|
|
middlewares:
|
|
- secure-headers
|
|
- compress
|
|
- retry
|
|
- rate-limit
|
|
- buffer
|