git
37 lines
953 B
YAML
37 lines
953 B
YAML
http:
|
|
middlewares:
|
|
crowdsec:
|
|
plugin:
|
|
crowdsec-bouncer:
|
|
crowdsecMode: live
|
|
crowdsecLapiKey: HeneLa2mazFVzl5+DQRKOdchBuJxKdjrHsHBE/03Acs
|
|
crowdsecLapiHost: crowdsec:8080
|
|
crowdsecLapiScheme: http
|
|
|
|
secHeaders:
|
|
headers:
|
|
browserXssFilter: true
|
|
contentTypeNosniff: true
|
|
frameDeny: true
|
|
# sslRedirect: true
|
|
#HSTS Configuration
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
stsSeconds: 15552000
|
|
forceSTSHeader: true
|
|
customFrameOptionsValue: "SAMEORIGIN"
|
|
default-chain:
|
|
chain:
|
|
middlewares:
|
|
- secHeaders
|
|
- crowdsec
|
|
tls:
|
|
options:
|
|
mtls-private-admin:
|
|
minVersion: VersionTLS12
|
|
sniStrict: true
|
|
clientAuth:
|
|
caFiles:
|
|
- /etc/traefik/certs/ca/clients-ca.crt
|
|
clientAuthType: RequireAndVerifyClientCert
|