cryptpad-docker
cryptpad-docker copied to clipboard
Traefik v2 label cofig
Just wanted to share my Traevik v2 label config for the cryptpad service:
labels:
- "traefik.enable=true"
- "traefik.docker.network=traefik"
- "traefik.http.services.cryptpad.loadbalancer.server.port=3000"
- "traefik.http.routers.cryptpad.rule=Host(`cryptpad.mydomain.tld`, `cryptpad-sandbox.mydomain.tld`)"
- "traefik.http.routers.cryptpad.middlewares=add-cors-embedder-policy,add-cors-resource-policy,add-hsts,add-origin"
- "traefik.http.routers.cryptpad.priority=2"
- "traefik.http.middlewares.add-cors-embedder-policy.headers.customresponseheaders.Cross-Origin-Embedder-Policy=require-corp"
- "traefik.http.middlewares.add-cors-resource-policy.headers.customresponseheaders.Cross-Origin-Resource-Policy=cross-origin"
- "traefik.http.middlewares.add-hsts.headers.customresponseheaders.Strict-Transport-Security=max-age=63072000; includeSubDomains always"
- "traefik.http.middlewares.add-origin.headers.customresponseheaders.Access-Control-Allow-Origin=https://cryptpad-sandbox.mydomain.tld"
This gets me pretty close to a 48/52 checkup score, with some notable missing CSP Frame options I'm not able to figure out how to set correctly in Traevik :/