90 lines
2.3 KiB
YAML
90 lines
2.3 KiB
YAML
http:
|
|
middlewares:
|
|
# HTTPS Redirect
|
|
redirect-https:
|
|
redirectScheme:
|
|
scheme: https
|
|
permanent: true
|
|
|
|
# Metube Basic Auth
|
|
metube-auth:
|
|
basicAuth:
|
|
users:
|
|
- "admin:$2y$05$3Q6gyLFW3NFNp4C6elnyfupntqB6VNB/tcIAeo8NEzvaqPxOjN0iC"
|
|
# - "jeepik:$2y$05$tIKrmhd7SYOe6yImRRAfpen7hpVdF8PnSbgBTCDZ.GI0Djx.Le2bq"
|
|
- "vv:$2y$05$JdT8AGUO9bd.E/PiCmKaoOJS1RFlXkrrmZ5mJ4f8/a1bEW39L3FbS"
|
|
|
|
realm: "MeTube Access"
|
|
|
|
# Basic Auth Traefik Dashboard
|
|
auth:
|
|
basicAuth:
|
|
users:
|
|
- "admin:$$apr1$$57E60OUM$$JoYwmLr/uZKaTy6U4IQd9."
|
|
# - "jeepik:$2y$05$Q8QqJwSjpycVYONyk4id/.rDFApW9oL8tycRMlGttNySsDv71Rnsu"
|
|
# - "vv:"
|
|
realm: "Traefik Dashboard"
|
|
|
|
# Basic Auth Dockmon
|
|
dockmon-auth:
|
|
basicAuth:
|
|
users:
|
|
- "admin:$$apr1$$.bCpmIHl$$dxPEKdw5aZLAwo8wUz52b1"
|
|
realm: "Dockmon Access"
|
|
|
|
# Cloudflare IP Whitelist
|
|
cloudflare-ipwhitelist:
|
|
ipWhiteList:
|
|
sourceRange:
|
|
- "173.245.48.0/20"
|
|
- "103.21.244.0/22"
|
|
- "103.22.200.0/22"
|
|
- "103.31.4.0/22"
|
|
- "141.101.64.0/18"
|
|
- "108.162.192.0/18"
|
|
- "190.93.240.0/20"
|
|
- "188.114.96.0/20"
|
|
- "197.234.240.0/22"
|
|
- "198.41.128.0/17"
|
|
- "162.158.0.0/15"
|
|
- "104.16.0.0/13"
|
|
- "104.24.0.0/14"
|
|
- "172.64.0.0/13"
|
|
- "131.0.72.0/22"
|
|
|
|
# Security Headers
|
|
security-headers:
|
|
headers:
|
|
browserXssFilter: true
|
|
contentTypeNosniff: true
|
|
forceSTSHeader: true
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
stsSeconds: 31536000
|
|
customFrameOptionsValue: "SAMEORIGIN"
|
|
customResponseHeaders:
|
|
X-Content-Type-Options: "nosniff"
|
|
Referrer-Policy: "strict-origin-when-cross-origin"
|
|
|
|
# Nextcloud specific headers
|
|
nextcloud-secure-headers:
|
|
headers:
|
|
hostsProxyHeaders:
|
|
- "X-Forwarded-Host"
|
|
- "X-Forwarded-Proto"
|
|
referrerPolicy: "same-origin"
|
|
customFrameOptionsValue: "SAMEORIGIN"
|
|
|
|
# Rate limiting
|
|
rate-limit:
|
|
rateLimit:
|
|
average: 100
|
|
burst: 50
|
|
period: 1m
|
|
|
|
# Nextcloud chain
|
|
nextcloud-chain:
|
|
chain:
|
|
middlewares:
|
|
- nextcloud-secure-headers
|
|
- security-headers |