http: middlewares: secure-headers: headers: stsSeconds: 31536000 stsIncludeSubdomains: true stsPreload: true forceSTSHeader: true contentTypeNosniff: true browserXssFilter: true frameDeny: true referrerPolicy: "strict-origin-when-cross-origin" dashboard-auth: basicAuth: users: - '{{ env "TRAEFIK_DASHBOARD_AUTH" }}'