nc mid

apps/nextcloud/base/ingress.yaml

@@ -15,4 +15,5 @@ spec:
     - name: nextcloud
       port: 80
     middlewares:
-    - name: nextcloud
+    - name: response
+    - name: redirect

apps/nextcloud/base/middleware.yaml

@@ -1,9 +1,21 @@
 apiVersion: traefik.io/v1alpha1
 kind: Middleware
 metadata:
-  name: nextcloud
+  name: redirect
 spec:
   redirectRegex:
-    regex: "^https://(.*)/.well-known/(card|cal)dav"
+    regex: "https://(.*)/.well-known/(card|cal)dav"
     replacement: "https://${1}/remote.php/dav/"
-    permanent: true
+    permanent: true
+
+---
+
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: response
+spec:
+  customResponseHeaders:
+    ### Change this to none to remove the Robots error:
+      X-Robots-Tag: "noindex, nofollow"
+      server: ""

infrastructure/03-traefik/base/middlewares/default-headers.yaml

@@ -11,6 +11,10 @@ spec:
     stsIncludeSubdomains: true
     stsPreload: true
     stsSeconds: 15552000
-    customFrameOptionsValue: SAMEORIGIN
+    featurePolicy: "camera 'none'; geolocation 'none'; microphone 'none'; payment 'none'; usb 'none'; vr 'none';"
+    customFrameOptionsValue: "SAMEORIGIN"
     customRequestHeaders:
       X-Forwarded-Proto: https
+    accessControlMaxAge: 300
+    sslRedirect: true
+    referrerPolicy: "no-referrer"