From b9e944e3f47af7ca4657619ac2e53b96c001881d Mon Sep 17 00:00:00 2001
From: Kevin <k.besson@clm.foundation>
Date: Fri, 28 Feb 2025 03:15:51 +0100
Subject: [PATCH] =?UTF-8?q?Ajout=20de=20la=20variable=20d'environnement=20?=
 =?UTF-8?q?NEXTCLOUD=5FHOST=20et=20mise=20=C3=A0=20jour=20de=20la=20r?=
 =?UTF-8?q?=C3=A8gle=20Traefik=20pour=20utiliser=20cette=20variable.=20Ajo?=
 =?UTF-8?q?ut=20de=20middleware=20pour=20les=20en-t=C3=AAtes=20CSP=20et=20?=
 =?UTF-8?q?X-Frame-Options=20dans=20la=20configuration=20de=20Nextcloud.?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .env        | 1 +
 compose.yml | 7 ++++++-
 2 files changed, 7 insertions(+), 1 deletion(-)

diff --git a/.env b/.env
index 0b497b5..fb37c25 100644
--- a/.env
+++ b/.env
@@ -17,6 +17,7 @@ KEYCLOAK_HOST=connect
 PORTAINER_HOST=portainer
 
 # Nextcloud
+NEXTCLOUD_HOST=cloud
 NEXTCLOUD_MYSQL_DATABASE=nextcloud
 NEXTCLOUD_ADMIN_USER=enkun
 NEXTCLOUD_ADMIN_PASSWORD=163222f8eb8e7726b543706dfd17f35da4fd004ddcb3dbee46f6d4e76ab10cfd
\ No newline at end of file
diff --git a/compose.yml b/compose.yml
index 81168e6..efbfa5d 100644
--- a/compose.yml
+++ b/compose.yml
@@ -126,8 +126,13 @@ services:
       - "8081:80"
     labels:
       - "traefik.enable=true"
-      - "traefik.http.routers.neah-nextcloud.rule=Host(`cloud.${MAIN_DOMAIN}`)"
+      - "traefik.http.routers.neah-nextcloud.rule=Host(`${NEXTCLOUD_HOST}.${MAIN_DOMAIN}`)"
       - "traefik.http.services.neah-nextcloud.loadbalancer.server.port=80"
+      # Middleware pour les en-têtes CSP
+      - "traefik.http.middlewares.nextcloud-headers.headers.customResponseHeaders.Content-Security-Policy=frame-ancestors 'self' http://${MAIN_DOMAIN} http://localhost:3000"
+      - "traefik.http.middlewares.nextcloud-headers.headers.customResponseHeaders.X-Frame-Options=ALLOWALL"
+      # Application du middleware au routeur
+      - "traefik.http.routers.neah-nextcloud.middlewares=nextcloud-headers"
     networks:
       - default
     depends_on: