Implement HSTS through ingress controller

StarCitizenTools · Feb 6, 2024 · 427d006 · 427d006
1 parent 194df4e
commit 427d006
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/shared/ingress.yaml b/shared/ingress.yaml
@@ -18,6 +18,9 @@ data:
   compute-full-forwarded-for: "true"
   enable-real-ip: "true"
   proxy-real-ip-cidr: "192.168.0.0/16,172.104.231.164,173.245.48.0/20,103.21.244.0/22,103.22.200.0/22,103.31.4.0/22,141.101.64.0/18,108.162.192.0/18,190.93.240.0/20,188.114.96.0/20,197.234.240.0/22,198.41.128.0/17,162.158.0.0/15,104.16.0.0/13,104.24.0.0/14,172.64.0.0/13,131.0.72.0/22,2400:cb00::/32,2606:4700::/32,2803:f800::/32,2405:b500::/32,2405:8100::/32,2a06:98c0::/29,2c0f:f248::/32"
+
+  hsts=max-age: "63072000"
+  hsts-preload: "true"
 ---
 apiVersion: networking.k8s.io/v1
 kind: Ingress
@@ -73,4 +76,4 @@ spec:
       secretName: www-mediawiki-ingress-cert
     - hosts:
         - scw.czen.me
-      secretName: czen-mediawiki-ingress-cert
+      secretName: czen-mediawiki-ingress-cert