William/Personal-Rancher-Catalog
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added "no-referrer" header

Browse Source
This commit is contained in:
WilliamMiceli
2019-01-12 20:00:51 -05:00
parent 60f5ba6bda
commit 9326cbff03
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
templates/Snipe-IT/0/docker-compose.yml
View File

@@ -24,6 +24,7 @@ services:
### Start Web Segment ### Start Web Segment
traefik.web.frontend.entryPoints: http,https traefik.web.frontend.entryPoints: http,https
traefik.web.frontend.headers.forceSTSHeader: true traefik.web.frontend.headers.forceSTSHeader: true
traefik.web.frontend.headers.referrerPolicy: no-referrer # Security enhancement (Prevents leaking of referer information)
traefik.web.frontend.headers.SSLRedirect: true traefik.web.frontend.headers.SSLRedirect: true
traefik.web.frontend.headers.STSPreload: true traefik.web.frontend.headers.STSPreload: true
traefik.web.frontend.headers.STSSeconds: 15552000 traefik.web.frontend.headers.STSSeconds: 15552000
@@ -53,6 +54,7 @@ services:
{{- if (.Values.HOST_LABEL)}} {{- if (.Values.HOST_LABEL)}}
io.rancher.scheduler.affinity:host_label: ${HOST_LABEL} io.rancher.scheduler.affinity:host_label: ${HOST_LABEL}
{{- end}} {{- end}}
traefik.enable: false
restart: on-failure restart: on-failure
volumes: volumes:
- /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system - /etc/localtime:/etc/localtime:ro # Syncronize time of container with the host system