tweak default docker compose

This commit is contained in:
yusing 2025-05-11 23:40:38 +08:00
parent e300170c51
commit 99e975145c

View file

@ -38,19 +38,34 @@
entrypoint: entrypoint:
# Below define an example of middleware config # Below define an example of middleware config
# 1. block non local IP connections # 1. set security headers
# 2. redirect HTTP to HTTPS # 2. block non local IP connections
# 3. redirect HTTP to HTTPS
# #
# middlewares: middlewares:
# - use: CIDRWhitelist - use: CloudflareRealIP
# allow: - use: ModifyResponse
# - "127.0.0.1" set_headers:
# - "10.0.0.0/8" Access-Control-Allow-Methods: GET, POST, PUT, PATCH, DELETE, OPTIONS, HEAD
# - "172.16.0.0/12" Access-Control-Allow-Headers: "*"
# - "192.168.0.0/16" Access-Control-Allow-Origin: "*"
# status: 403 Access-Control-Max-Age: 180
# message: "Forbidden" Vary: "*"
# - use: RedirectHTTP X-XSS-Protection: 1; mode=block
Content-Security-Policy: "object-src 'self'; frame-ancestors 'self';"
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
# - use: CIDRWhitelist
# allow:
# - "127.0.0.1"
# - "10.0.0.0/8"
# - "172.16.0.0/12"
# - "192.168.0.0/16"
# status: 403
# message: "Forbidden"
# - use: RedirectHTTP
# below enables access log # below enables access log
access_log: access_log: