Ajout de middleware pour les en-têtes CSP et X-Frame-Options dans la configuration de Keycloak

This commit is contained in:
Kevin 2025-02-28 03:21:02 +01:00
parent b9e944e3f4
commit a8547de16a

View File

@ -80,6 +80,11 @@ services:
- "traefik.enable=true" - "traefik.enable=true"
- "traefik.http.routers.neah-keycloak.rule=Host(`${KEYCLOAK_HOST}.${MAIN_DOMAIN}`)" - "traefik.http.routers.neah-keycloak.rule=Host(`${KEYCLOAK_HOST}.${MAIN_DOMAIN}`)"
- "traefik.http.services.neah-keycloak.loadbalancer.server.port=8080" - "traefik.http.services.neah-keycloak.loadbalancer.server.port=8080"
# Middleware pour les en-têtes CSP
- "traefik.http.middlewares.keycloak-headers.headers.customResponseHeaders.Content-Security-Policy=frame-ancestors 'self' http://${MAIN_DOMAIN} http://localhost:3000"
- "traefik.http.middlewares.keycloak-headers.headers.customResponseHeaders.X-Frame-Options=ALLOWALL"
# Application du middleware au routeur
- "traefik.http.routers.neah-keycloak.middlewares=keycloak-headers"
volumes: volumes:
- keycloak_data:/opt/keycloak/data - keycloak_data:/opt/keycloak/data
networks: networks: