Traefik Headers

    middleware-default-headers:
      headers:
        customFrameOptionsValue: SAMEORIGIN
        browserXssFilter: true
        stsSeconds: 155520011 #31536000
        referrerPolicy: no-referrer
        contentTypeNosniff: true
        sslRedirect: true
        forceSTSHeader: true
        stsIncludeSubdomains: true
        stsPreload: true
        featurePolicy: true
        sslForceHost: true
        contentSecurityPolicy: "default-src ‘self’; script-src ‘self’ ‘unsafe-eval’; style-src ‘self’ ‘unsafe-inline’; frame-src *; img-src * data: blob:; font-src ‘self’ data:; media-src *;"
        accessControlAllowOriginList: [“<origin>”]
        featurePolicy: "geolocation 'none'; camera 'none'; microphone 'none'"