Upgrading to Traefik 3

This commit is contained in:
2024-08-15 08:26:09 +02:00
parent 10c82c1fea
commit 0ddb8df763
6 changed files with 17 additions and 15 deletions

View File

@@ -3,5 +3,5 @@ http:
headers-policy-domain:
headers:
customFrameOptionsValue: "ALLOW-FROM https://example.net"
contentsecuritypolicy: "frame-ancestors 'self' example.net *.example.net"
referrerpolicy: "strict-origin-when-cross-origin"
contentSecurityPolicy: "frame-ancestors 'self' example.net *.example.net"
referrerPolicy: "strict-origin-when-cross-origin"

View File

@@ -2,8 +2,8 @@ http:
middlewares:
headers-base:
headers:
sslredirect: true
framedeny: true
browserxssfilter: true
contenttypenosniff: true
isdevelopment: false
sslRedirect: true
frameDeny: true
browserXssFilter: true
contentTypeNoSniff: true
isDevelopment: false

View File

@@ -2,5 +2,5 @@ http:
middlewares:
headers-policy-self:
headers:
contentsecuritypolicy: "script-src 'self'"
referrerpolicy: "strict-origin-when-cross-origin"
contentSecurityPolicy: "script-src 'self'"
referrerPolicy: "strict-origin-when-cross-origin"

View File

@@ -2,6 +2,6 @@ http:
middlewares:
headers-sts:
headers:
stsincludesubdomains: true
stspreload: true
stsseconds: 31536000
stsIncludeSubdomains: true
stsPreload: true
stsSeconds: 31536000

View File

@@ -1,5 +1,5 @@
http:
middlewares:
net-home:
ipwhitelist:
ipallowlist:
sourcerange: "192.168.2.0/28"

View File

@@ -10,12 +10,12 @@ networks:
services:
traefik:
image: "traefik:v2.4.8"
image: "traefik:v3.1.2"
restart: always
command:
#- "--core.defaultRuleSyntax=v2"
#- "--log.level=DEBUG"
- "--global.sendanonymoususage=false"
- "--pilot.dashboard=false"
- "--api.dashboard=true"
#- "--api.insecure=true"
- "--providers.docker=true"
@@ -28,6 +28,8 @@ services:
- "--entrypoints.web.http.redirections.entrypoint.scheme=https"
- "--entrypoints.web-secure.address=:443"
- "--entrypoints.ssh-git.address=:2201"
#- "--entrypoints.turn-udp.address=:80/udp"
#- "--entrypoints.turns-udp.address=:443/udp"
- "--certificatesresolvers.letsencrypt.acme.httpchallenge=true"
- "--certificatesresolvers.letsencrypt.acme.httpchallenge.entrypoint=web"
#- "--certificatesresolvers.letsencrypt.acme.caserver=https://acme-staging-v02.api.letsencrypt.org/directory"