asepharyanaandClaude Opus 4.8
f465ca261e
- Traefik: remove asephstech/asephscloud SSL certs, fix api.insecure, add ping healthcheck - .env.example: prune from 145 to 30 vars (remove Firebase, Discord, Coolify, etc.) - scraper.Dockerfile: remove Node.js & Chromium from runtime, add healthcheck - CI/CD: remove orphan container ref, commented blocks, fix lint workflow - infra: remove mysql config (no active service), clean up middleware config - root: remove .nvmrc (dup), renovate.json (use dependabot), simplify Makefile - scripts: fix legacy package refs, simplify update-deps to use bun - docs: remove stale handoff-log, quality-gates, superpowers designs, archived files - compose: add healthchecks to traefik, redis, and scraper-api services Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
73 lines
1.7 KiB
YAML
73 lines
1.7 KiB
YAML
http:
|
|
middlewares:
|
|
secure-headers:
|
|
headers:
|
|
sslRedirect: true
|
|
forceSTSHeader: true
|
|
stsSeconds: 31536000
|
|
stsIncludeSubdomains: true
|
|
stsPreload: true
|
|
frameDeny: true
|
|
contentTypeNosniff: true
|
|
browserXSSFilter: true
|
|
referrerPolicy: 'same-origin'
|
|
customResponseHeaders:
|
|
X-Content-Type-Options: 'nosniff'
|
|
X-Frame-Options: 'DENY'
|
|
X-XSS-Protection: '1; mode=block'
|
|
Referrer-Policy: 'same-origin'
|
|
Permissions-Policy: 'geolocation=(), microphone=(), camera=()'
|
|
compress:
|
|
compress:
|
|
minResponseBodyBytes: 256
|
|
excludedContentTypes:
|
|
- 'image/*'
|
|
- 'application/octet-stream'
|
|
retry:
|
|
retry:
|
|
attempts: 3
|
|
rate-limit:
|
|
rateLimit:
|
|
average: 100
|
|
burst: 50
|
|
buffer:
|
|
buffering:
|
|
maxRequestBodyBytes: 10485760
|
|
maxResponseBodyBytes: 10485760
|
|
memRequestBodyBytes: 1048576
|
|
memResponseBodyBytes: 1048576
|
|
admin-chain:
|
|
chain:
|
|
middlewares:
|
|
- secure-headers
|
|
- compress
|
|
- retry
|
|
|
|
# ── Useful Plugins ──
|
|
real-ip:
|
|
plugin:
|
|
real-ip:
|
|
excludednetworks:
|
|
- '127.0.0.1/32'
|
|
realipheader: 'CF-Connecting-IP'
|
|
|
|
block-sensitive-paths:
|
|
plugin:
|
|
blockpath:
|
|
regex:
|
|
- "^/\\.env"
|
|
- "^/\\.git"
|
|
- '^/wp-admin'
|
|
- "^/wp-login\\.php"
|
|
- "^/config\\.php"
|
|
|
|
# ── Common Chain ──
|
|
common-chain:
|
|
chain:
|
|
middlewares:
|
|
- secure-headers
|
|
- compress
|
|
- retry
|
|
- rate-limit
|
|
- buffer
|