diff --git a/blinko/compose.yml b/blinko/compose.yml index ad1fb60..5d85ae3 100644 --- a/blinko/compose.yml +++ b/blinko/compose.yml @@ -24,7 +24,7 @@ services: - "traefik.http.routers.blinko-web-secure.rule=Host(`${TRAEFIK_HOST}`)" - "traefik.http.routers.blinko-web-secure.tls.certresolver=resolver" - "traefik.http.routers.blinko-web-secure.entrypoints=web-secure" - - "traefik.http.routers.blinko-web-secure.middlewares=security-headers@file" + - "traefik.http.routers.blinko-web-secure.middlewares=security-headers@file,no-index@file" - "traefik.http.services.blinko-web-secure.loadbalancer.server.port=1111" - "traefik.docker.network=${NETWORK_NAME}" - "com.centurylinklabs.watchtower.enable=true" diff --git a/coolify/compose.yml b/coolify/compose.yml index 9775b76..1f46e49 100644 --- a/coolify/compose.yml +++ b/coolify/compose.yml @@ -49,7 +49,7 @@ services: - "traefik.http.routers.coolify-web-secure.rule=Host(`${TRAEFIK_HOST}`)" - "traefik.http.routers.coolify-web-secure.tls.certresolver=resolver" - "traefik.http.routers.coolify-web-secure.entrypoints=web-secure" - - "traefik.http.routers.coolify-web-secure.middlewares=security-headers@file" + - "traefik.http.routers.coolify-web-secure.middlewares=security-headers@file,no-index@file" - "traefik.http.routers.coolify-web-secure.service=coolify" - "traefik.http.routers.coolify-web-secure.priority=1" - "traefik.http.services.coolify.loadbalancer.server.port=8080" diff --git a/immich/compose.yml b/immich/compose.yml index 563e61c..2ead045 100644 --- a/immich/compose.yml +++ b/immich/compose.yml @@ -30,7 +30,7 @@ services: - "traefik.http.routers.immich-web-secure.rule=Host(`${TRAEFIK_HOST}`)" - "traefik.http.routers.immich-web-secure.tls.certresolver=resolver" - "traefik.http.routers.immich-web-secure.entrypoints=web-secure" - - "traefik.http.routers.immich-web-secure.middlewares=security-headers@file" + - "traefik.http.routers.immich-web-secure.middlewares=security-headers@file,no-index@file" - "traefik.http.services.immich-web-secure.loadbalancer.server.port=2283" - "traefik.docker.network=${NETWORK_NAME}" - "com.centurylinklabs.watchtower.enable=true" diff --git a/mattermost/compose.yml b/mattermost/compose.yml index e62790a..4144b7e 100644 --- a/mattermost/compose.yml +++ b/mattermost/compose.yml @@ -38,7 +38,7 @@ services: - "traefik.http.routers.mattermost-web-secure.rule=Host(`${TRAEFIK_HOST}`)" - "traefik.http.routers.mattermost-web-secure.tls.certresolver=resolver" - "traefik.http.routers.mattermost-web-secure.entrypoints=web-secure" - - "traefik.http.routers.mattermost-web-secure.middlewares=security-headers@file" + - "traefik.http.routers.mattermost-web-secure.middlewares=security-headers@file,no-index@file" - "traefik.http.services.mattermost-web-secure.loadbalancer.server.port=8065" - "traefik.docker.network=${NETWORK_NAME}" - "com.centurylinklabs.watchtower.enable=true" diff --git a/traefik/dynamic/security.yaml b/traefik/dynamic/security.yaml index 22fd40b..b5897f4 100644 --- a/traefik/dynamic/security.yaml +++ b/traefik/dynamic/security.yaml @@ -27,10 +27,13 @@ http: contentTypeNosniff: true referrerPolicy: "strict-origin-when-cross-origin" customResponseHeaders: - X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex" Permissions-Policy: "camera=(), microphone=(), geolocation=(), payment=(), usb=(), magnetometer=(), accelerometer=(), gyroscope=()" X-Content-Type-Options: "nosniff" X-Frame-Options: "SAMEORIGIN" + no-index: + headers: + customResponseHeaders: + X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex" rate-limit: rateLimit: average: 100 diff --git a/umami/compose.yml b/umami/compose.yml index f60c9af..e4676b6 100644 --- a/umami/compose.yml +++ b/umami/compose.yml @@ -25,7 +25,7 @@ services: - "traefik.http.routers.umami-web-secure.rule=Host(`${TRAEFIK_HOST}`)" - "traefik.http.routers.umami-web-secure.tls.certresolver=resolver" - "traefik.http.routers.umami-web-secure.entrypoints=web-secure" - - "traefik.http.routers.umami-web-secure.middlewares=security-headers@file" + - "traefik.http.routers.umami-web-secure.middlewares=security-headers@file,no-index@file" - "traefik.http.services.umami-web-secure.loadbalancer.server.port=3000" - "traefik.docker.network=${NETWORK_NAME}" - "com.centurylinklabs.watchtower.enable=true" diff --git a/vaultwarden/compose.yml b/vaultwarden/compose.yml index 2e831de..1e9e6aa 100644 --- a/vaultwarden/compose.yml +++ b/vaultwarden/compose.yml @@ -26,7 +26,7 @@ services: - "traefik.http.routers.vaultwarden-web-secure.rule=Host(`${TRAEFIK_HOST}`)" - "traefik.http.routers.vaultwarden-web-secure.tls.certresolver=resolver" - "traefik.http.routers.vaultwarden-web-secure.entrypoints=web-secure" - - "traefik.http.routers.vaultwarden-web-secure.middlewares=security-headers@file" + - "traefik.http.routers.vaultwarden-web-secure.middlewares=security-headers@file,no-index@file" - "traefik.http.services.vaultwarden-web-secure.loadbalancer.server.port=80" - "traefik.docker.network=${NETWORK_NAME}" - "com.centurylinklabs.watchtower.enable=true"