finallycoffee/matrix-docker-ansible-deploy
5
1
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Add security headers to synapse-admin (on Traefik)

Browse Source 
We've had it on `matrix-nginx-proxy` before, but
our initial support for Traefik did not include any of these security
headers.
This commit is contained in:
Slavi Pantaleev
2023-02-14 08:49:00 +02:00
parent 71597132e0
commit c33ed94352
2 changed files with 76 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
roles/custom/matrix-synapse-admin/templates/labels.j2
View File

@ -18,6 +18,13 @@ traefik.http.middlewares.matrix-synapse-admin-strip-prefix.stripprefix.prefixes=
{% set middlewares = middlewares + ['matrix-synapse-admin-strip-prefix'] %}
{% endif %}
{% if matrix_synapse_admin_container_labels_traefik_additional_response_headers.keys() | length > 0 %}
{% for name, value in matrix_synapse_admin_container_labels_traefik_additional_response_headers.items() %}
traefik.http.middlewares.matrix-synapse-admin-add-headers.headers.customresponseheaders.{{ name }}={{ value }}
{% endfor %}
{% set middlewares = middlewares + ['matrix-synapse-admin-add-headers'] %}
{% endif %}
traefik.http.routers.matrix-synapse-admin.rule={{ matrix_synapse_admin_container_labels_traefik_rule }}
{% if middlewares | length > 0 %}
traefik.http.routers.matrix-synapse-admin.middlewares={{ middlewares | join(',') }}