diff --git a/stack.production.yml b/stack.production.yml index e609cf1..243a592 100644 --- a/stack.production.yml +++ b/stack.production.yml @@ -1,6 +1,6 @@ networks: traefik: - external: true + external: "true" services: n8n: @@ -28,22 +28,22 @@ services: volumes: - n8n_data:/home/node/.n8n labels: - traefik.enable: true + traefik.enable: "true" traefik.http.routers.production_n8n.rule: Host(`n8n.nixc.us`) traefik.http.routers.production_n8n.entrypoints: websecure - traefik.http.routers.production_n8n.tls: true + traefik.http.routers.production_n8n.tls: "true" traefik.http.routers.production_n8n.tls.certresolver: letsencryptresolver traefik.http.services.production_n8n.loadbalancer.server.port: 5678 traefik.http.routers.production_n8n.middlewares: secure-headers traefik.docker.network: traefik # Security headers middleware traefik.http.middlewares.secure-headers.headers.stsSeconds: 63072000 - traefik.http.middlewares.secure-headers.headers.stsIncludeSubdomains: true - traefik.http.middlewares.secure-headers.headers.stsPreload: true - traefik.http.middlewares.secure-headers.headers.forceSTSHeader: true - traefik.http.middlewares.secure-headers.headers.frameDeny: true - traefik.http.middlewares.secure-headers.headers.contentTypeNosniff: true - traefik.http.middlewares.secure-headers.headers.browserXssFilter: true + traefik.http.middlewares.secure-headers.headers.stsIncludeSubdomains: "true" + traefik.http.middlewares.secure-headers.headers.stsPreload: "true" + traefik.http.middlewares.secure-headers.headers.forceSTSHeader: "true" + traefik.http.middlewares.secure-headers.headers.frameDeny: "true" + traefik.http.middlewares.secure-headers.headers.contentTypeNosniff: "true" + traefik.http.middlewares.secure-headers.headers.browserXssFilter: "true" traefik.http.middlewares.secure-headers.headers.referrerPolicy: no-referrer traefik.http.middlewares.secure-headers.headers.featurePolicy: camera 'none'; geolocation 'none'; microphone 'none'; payment 'none'; usb 'none'; vr 'none' diff --git a/stack.staging.yml b/stack.staging.yml index b611a48..0e3c0fa 100644 --- a/stack.staging.yml +++ b/stack.staging.yml @@ -1,6 +1,6 @@ networks: traefik: - external: true + external: "true" default: services: @@ -22,10 +22,10 @@ services: networks: - traefik labels: - traefik.enable: true + traefik.enable: "true" traefik.http.routers.staging_template.rule: Host(`staging.template.nixc.us`) traefik.http.routers.staging_template.entrypoints: websecure - traefik.http.routers.staging_template.tls: true + traefik.http.routers.staging_template.tls: "true" traefik.http.routers.staging_template.tls.certresolver: letsencryptresolver traefik.http.services.staging_template.loadbalancer.server.port: 3000 # traefik.http.services.staging_template.loadbalancer.healthcheck.path: /health @@ -57,22 +57,22 @@ services: volumes: - n8n_data:/home/node/.n8n labels: - traefik.enable: true + traefik.enable: "true" traefik.http.routers.staging_n8n.rule: Host(`staging-n8n.nixc.us`) traefik.http.routers.staging_n8n.entrypoints: websecure - traefik.http.routers.staging_n8n.tls: true + traefik.http.routers.staging_n8n.tls: "true" traefik.http.routers.staging_n8n.tls.certresolver: letsencryptresolver traefik.http.services.staging_n8n.loadbalancer.server.port: 5678 traefik.http.routers.staging_n8n.middlewares: secure-headers traefik.docker.network: traefik # Security headers middleware traefik.http.middlewares.secure-headers.headers.stsSeconds: 63072000 - traefik.http.middlewares.secure-headers.headers.stsIncludeSubdomains: true - traefik.http.middlewares.secure-headers.headers.stsPreload: true - traefik.http.middlewares.secure-headers.headers.forceSTSHeader: true - traefik.http.middlewares.secure-headers.headers.frameDeny: true - traefik.http.middlewares.secure-headers.headers.contentTypeNosniff: true - traefik.http.middlewares.secure-headers.headers.browserXssFilter: true + traefik.http.middlewares.secure-headers.headers.stsIncludeSubdomains: "true" + traefik.http.middlewares.secure-headers.headers.stsPreload: "true" + traefik.http.middlewares.secure-headers.headers.forceSTSHeader: "true" + traefik.http.middlewares.secure-headers.headers.frameDeny: "true" + traefik.http.middlewares.secure-headers.headers.contentTypeNosniff: "true" + traefik.http.middlewares.secure-headers.headers.browserXssFilter: "true" traefik.http.middlewares.secure-headers.headers.referrerPolicy: no-referrer traefik.http.middlewares.secure-headers.headers.featurePolicy: camera 'none'; geolocation 'none'; microphone 'none'; payment 'none'; usb 'none'; vr 'none'