feat: add security headers middleware and clean up ingress configuration
Co-authored-by: aider (openai/qwen2.5-coder:32b) <aider@aider.chat>
This commit is contained in:
13
virtualinsanity/wordpress-security-headers-middleware.yaml
Normal file
13
virtualinsanity/wordpress-security-headers-middleware.yaml
Normal file
@@ -0,0 +1,13 @@
|
||||
apiVersion: traefik.containo.us/v1alpha1
|
||||
kind: Middleware
|
||||
metadata:
|
||||
name: wordpress-security-headers
|
||||
namespace: wordpress
|
||||
spec:
|
||||
headers:
|
||||
customResponseHeaders:
|
||||
X-Content-Type-Options: nosniff
|
||||
X-Frame-Options: SAMEORIGIN
|
||||
X-XSS-Protection: "1; mode=block"
|
||||
Referrer-Policy: no-referrer-when-downgrade
|
||||
Content-Security-Policy: default-src 'self'
|
||||
Reference in New Issue
Block a user