61 lines
1.4 KiB
YAML
Executable File
61 lines
1.4 KiB
YAML
Executable File
# Configuration dynamique Traefik
|
|
# Fichier : /opt/traefik/config/dynamic.yml
|
|
|
|
http:
|
|
middlewares:
|
|
# Redirection HTTP -> HTTPS
|
|
redirect-to-https:
|
|
redirectScheme:
|
|
scheme: https
|
|
permanent: true
|
|
|
|
# Compression
|
|
compress:
|
|
compress: {}
|
|
|
|
# Headers de securite
|
|
security-headers:
|
|
headers:
|
|
frameDeny: true
|
|
sslRedirect: true
|
|
browserXssFilter: true
|
|
contentTypeNosniff: true
|
|
forceSTSHeader: true
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
stsSeconds: 31536000
|
|
customResponseHeaders:
|
|
X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex"
|
|
X-Content-Type-Options: "nosniff"
|
|
X-Frame-Options: "DENY"
|
|
X-XSS-Protection: "1; mode=block"
|
|
Referrer-Policy: "strict-origin-when-cross-origin"
|
|
Permissions-Policy: "camera=(), microphone=(), geolocation=()"
|
|
|
|
# Router pour Home Assistant (VM 100)
|
|
routers:
|
|
homeassistant:
|
|
rule: "Host(`ha.peis.fr`)"
|
|
entryPoints:
|
|
- "websecure"
|
|
tls:
|
|
certResolver: "letsencrypt"
|
|
service: homeassistant
|
|
middlewares:
|
|
- "security-headers"
|
|
|
|
# Service Home Assistant
|
|
services:
|
|
homeassistant:
|
|
loadBalancer:
|
|
servers:
|
|
- url: "http://192.168.0.43:8123"
|
|
|
|
tcp:
|
|
routers: {}
|
|
services: {}
|
|
|
|
udp:
|
|
routers: {}
|
|
services: {}
|