feat: add security headers middleware and clean up ingress configuration
Co-authored-by: aider (openai/qwen2.5-coder:32b) <aider@aider.chat>
This commit is contained in:
13
virtualinsanity/wordpress-security-headers-middleware.yaml
Normal file
13
virtualinsanity/wordpress-security-headers-middleware.yaml
Normal file
@@ -0,0 +1,13 @@
|
|||||||
|
apiVersion: traefik.containo.us/v1alpha1
|
||||||
|
kind: Middleware
|
||||||
|
metadata:
|
||||||
|
name: wordpress-security-headers
|
||||||
|
namespace: wordpress
|
||||||
|
spec:
|
||||||
|
headers:
|
||||||
|
customResponseHeaders:
|
||||||
|
X-Content-Type-Options: nosniff
|
||||||
|
X-Frame-Options: SAMEORIGIN
|
||||||
|
X-XSS-Protection: "1; mode=block"
|
||||||
|
Referrer-Policy: no-referrer-when-downgrade
|
||||||
|
Content-Security-Policy: default-src 'self'
|
||||||
Reference in New Issue
Block a user