Traefik configuration

conf/files/auth-traefik.yml

@@ -0,0 +1,6 @@
+http:
+  middlewares:
+    auth-traefik:
+      basicauth:
+        usersFile: "conf/users/traefik.htpasswd"
+

conf/files/headers-base.yml

@@ -0,0 +1,9 @@
+http:
+  middlewares:
+    headers-base:
+      headers:
+        sslredirect: true
+        framedeny: true
+        browserxssfilter: true
+        contenttypenosniff: true
+        isdevelopment: false

conf/files/headers-policy-self.yml

@@ -0,0 +1,6 @@
+http:
+  middlewares:
+    headers-policy-self:
+      headers:
+        contentsecuritypolicy: "script-src 'self'"
+        referrerpolicy: "strict-origin-when-cross-origin"

conf/files/headers-sts.yml

@@ -0,0 +1,7 @@
+http:
+  middlewares:
+    headers-sts:
+      headers:
+        stsincludesubdomains: true
+        stspreload: true
+        stsseconds: 31536000

conf/files/net-home.yml

@@ -0,0 +1,5 @@
+http:
+  middlewares:
+    net-home:
+      ipwhitelist:
+        sourcerange: "192.168.2.0/28"

conf/files/tls.yml

@@ -0,0 +1,19 @@
+# Dynamic configuration
+
+tls:
+  options:
+    default:
+      minVersion: "VersionTLS13"
+
+    mintls12:
+      minVersion: "VersionTLS12"
+      cipherSuites:
+       - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+       - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+       - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+       - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+       - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+       - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305
+
+    mintls13:
+      minVersion: "VersionTLS13"