cryptpad-docker icon indicating copy to clipboard operation
cryptpad-docker copied to clipboard

Traefik v2 label cofig

Open prologic opened this issue 2 years ago • 1 comments

Just wanted to share my Traevik v2 label config for the cryptpad service:

      labels:
        - "traefik.enable=true"
        - "traefik.docker.network=traefik"
        - "traefik.http.services.cryptpad.loadbalancer.server.port=3000"
        - "traefik.http.routers.cryptpad.rule=Host(`cryptpad.mydomain.tld`, `cryptpad-sandbox.mydomain.tld`)"
        - "traefik.http.routers.cryptpad.middlewares=add-cors-embedder-policy,add-cors-resource-policy,add-hsts,add-origin"
        - "traefik.http.routers.cryptpad.priority=2"
        - "traefik.http.middlewares.add-cors-embedder-policy.headers.customresponseheaders.Cross-Origin-Embedder-Policy=require-corp"
        - "traefik.http.middlewares.add-cors-resource-policy.headers.customresponseheaders.Cross-Origin-Resource-Policy=cross-origin"
        - "traefik.http.middlewares.add-hsts.headers.customresponseheaders.Strict-Transport-Security=max-age=63072000; includeSubDomains always"
        - "traefik.http.middlewares.add-origin.headers.customresponseheaders.Access-Control-Allow-Origin=https://cryptpad-sandbox.mydomain.tld"

This gets me pretty close to a 48/52 checkup score, with some notable missing CSP Frame options I'm not able to figure out how to set correctly in Traevik :/

prologic avatar Jul 23 '23 19:07 prologic