708312c80c
Fully dockerized deployment with automatic Let's Encrypt certificates via Traefik's static file provider (no docker.sock needed), bind-mounted data folders instead of named volumes, and domain/secrets kept out of git via .env + rendered templates. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
18 lines
422 B
YAML
18 lines
422 B
YAML
http:
|
|
middlewares:
|
|
secure-headers:
|
|
headers:
|
|
stsSeconds: 31536000
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
forceSTSHeader: true
|
|
contentTypeNosniff: true
|
|
browserXssFilter: true
|
|
frameDeny: true
|
|
referrerPolicy: "strict-origin-when-cross-origin"
|
|
|
|
dashboard-auth:
|
|
basicAuth:
|
|
users:
|
|
- '{{ env "TRAEFIK_DASHBOARD_AUTH" }}'
|