Files
rmm-openwrt/deploy/reverse-proxy/Caddyfile.keendns

26 lines
752 B
Caddyfile

{$RMM_DOMAIN} {
encode zstd gzip
reverse_proxy rmm-server:8080
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Referrer-Policy "same-origin"
Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'self'; frame-ancestors 'none'; base-uri 'none'; form-action 'self'"
}
}
*.{$RMM_DEVICE_DOMAIN} {
tls /certs/device-domain.crt /certs/device-domain.key
encode zstd gzip
reverse_proxy rmm-server:8080
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains"
X-Content-Type-Options "nosniff"
X-Frame-Options "SAMEORIGIN"
Referrer-Policy "no-referrer"
}
}