traefik: expand the dropsecurityheaders middleware

saltyorg · Oct 4, 2023 · f9ca566 · f9ca566
1 parent 671b519
commit f9ca566
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/roles/remote/tasks/main.yml b/roles/remote/tasks/main.yml
@@ -37,7 +37,7 @@
       register: saltbox_managed_containers
       ignore_errors: true
 
-    - name: "Set 'containers_list' variable"
+    - name: "Set 'containers_list' and 'remote_stopped_docker' variables"
       ansible.builtin.set_fact:
         containers_list: "{{ saltbox_managed_containers.stdout }}"
         remote_stopped_docker: true

diff --git a/roles/traefik/templates/dynamic.yml.j2 b/roles/traefik/templates/dynamic.yml.j2
@@ -29,11 +29,18 @@ http:
           X-Forwarded-Proto: https
     dropsecurityheaders:
       headers:
+        accessControlAllowCredentials: "true"
+        accessControlAllowHeaders: "*"
+        accessControlAllowMethods: "*"
+        accessControlAllowOriginList: "*"
+        accessControlExposeHeaders: "*"
+        accessControlMaxAge: "100000"
         customresponseheaders:
           content-security-policy: ""
           permissions-policy: ""
           referrer-policy: ""
           x-frame-options: ""
+          cross-origin-opener-policy: ""
     hsts:
       headers:
         stsSeconds: 63072000