Skip to content

Commit

Permalink
fix(nginx): add option to easy set HSTS
Browse files Browse the repository at this point in the history
Signed-off-by: WrenIX <[email protected]>
  • Loading branch information
wrenix committed Sep 19, 2024
1 parent b25b4ad commit 51f27a8
Show file tree
Hide file tree
Showing 3 changed files with 13 additions and 2 deletions.
2 changes: 1 addition & 1 deletion charts/nextcloud/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
apiVersion: v2
name: nextcloud
version: 6.0.0
version: 6.0.1
appVersion: 30.0.0
description: A file sharing server that puts the control and security of your own data back into your hands.
keywords:
Expand Down
4 changes: 3 additions & 1 deletion charts/nextcloud/files/nginx.config.tpl
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,9 @@ server {
# will add the domain to a hardcoded list that is shipped
# in all major browsers and getting removed from this list
# could take several months.
#add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;" always;
{{- with .Values.nginx.config.header.hsts }}
add_header Strict-Transport-Security {{ . | quote }} always;
{{- end }}

# set max upload size
client_max_body_size 10G;
Expand Down
9 changes: 9 additions & 0 deletions charts/nextcloud/values.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -328,6 +328,15 @@ nginx:
config:
# This generates the default nginx config as per the nextcloud documentation
default: true
header:
# -- HSTS settings
# WARNING: Only add the preload option once you read about
# the consequences in https://hstspreload.org/. This option
# will add the domain to a hardcoded list that is shipped
# in all major browsers and getting removed from this list
# could take several months.
# example: hsts: "max-age=15768000; includeSubDomains; preload;"
hsts:

Check failure on line 339 in charts/nextcloud/values.yaml

View workflow job for this annotation

GitHub Actions / lint

339:12 [trailing-spaces] trailing spaces
custom:
# custom: |-
# worker_processes 1;..
Expand Down

0 comments on commit 51f27a8

Please sign in to comment.