# Traefik dynamic config: reusable middlewares + TLS options.
# Site routers reference these by name, e.g. `security-headers@file`.
http:
  middlewares:
    security-headers:
      headers:
        stsSeconds: 31536000
        stsIncludeSubdomains: true
        stsPreload: true
        contentTypeNosniff: true
        browserXssFilter: true
        referrerPolicy: strict-origin-when-cross-origin
        frameDeny: true

tls:
  options:
    default:
      minVersion: VersionTLS12
      sniStrict: true