36 lines
1.5 KiB
YAML
36 lines
1.5 KiB
YAML
---
|
|
image:
|
|
repository: ohmyform/ohmyform
|
|
pullPolicy: IfNotPresent
|
|
tag: ""
|
|
|
|
nameOverride: ""
|
|
fullnameOverride: ""
|
|
|
|
service:
|
|
type: ClusterIP
|
|
port: 8080
|
|
|
|
ingress:
|
|
enabled: true
|
|
annotations:
|
|
kubernetes.io/ingress.class: nginx
|
|
kubernetes.io/tls-acme: "true"
|
|
nginx.ingress.kubernetes.io/proxy-body-size: 10G
|
|
cert-manager.io/cluster-issuer: "letsencrypt-prod"
|
|
nginx.ingress.kubernetes.io/configuration-snippet: |
|
|
more_clear_headers "X-Powered-By";
|
|
more_set_headers "X-XSS-Protection: 1";
|
|
more_set_headers "X-Frame-Options: SAMEORIGIN";
|
|
more_set_headers "X-Content-Type-Options: nosniff";
|
|
more_set_headers "Referrer-Policy: strict-origin-when-cross-origin";
|
|
more_set_headers "Permissions-Policy: geolocation=(none);midi=(self);notifications=(self);push=(self);sync-xhr=();microphone=(none);camera=(none);magnetometer=(none);gyroscope=(none);speaker=(self);vibrate=(self);fullscreen=(self);payment=(none);";
|
|
more_set_headers "Content-Security-Policy: base-uri 'none'; manifest-src 'self'; connect-src 'self' wss: ws: https://mb3admin.com; font-src 'self' data: ; form-action 'self'; frame-ancestors 'self'; worker-src 'self' blob:; frame-src 'self'; img-src data: https: http:; media-src 'self' blob: data:; object-src 'none'; script-src 'self' https://www.gstatic.com; style-src 'self' 'unsafe-inline'";
|
|
path: /
|
|
hosts:
|
|
- etcd.jamma.dev
|
|
tls:
|
|
- secretName: tls-jamma-ohmyform
|
|
hosts:
|
|
- etcd.jamma.dev
|