Enable HSTS Nextcloud docker

Traefik Traefik v3 (latest)
1

Hello guys, I'm struggling to eliminate this error from nextcloud:

Some headers are not set correctly on your instance - The Strict-Transport-Security HTTP header is not set (should be at least 15552000 seconds). For enhanced security, it is recommended to enable HSTS. For more details see the documentation :arrow_upper_right:.

Tried adding this into labels and many more 'solutions' from internet but without luck:

labels:
  - "traefik.http.middlewares.testHeader.headers.framedeny=true"
  - "traefik.http.middlewares.testHeader.headers.browserxssfilter=true"

If anyone could help I would be grateful.

2

The doc you linked states which header to set:

Strict-Transport-Security "max-age=15552000; includeSubDomains"
3

Ok I eliminated error with these labels:

        - traefik.http.middlewares.nextcloudHeader.headers.stsSeconds=15752000
        - traefik.http.middlewares.nextcloudHeader.headers.stsIncludeSubdomains=true
        - traefik.http.middlewares.nextcloudHeader.headers.stsPreload=true
        - traefik.http.middlewares.nextcloudHeader.headers.forceSTSHeader=true
        - traefik.http.routers.nextcloud.middlewares=nextcloudHeader

Thank you! Resolved

4

This topic was automatically closed 3 days after the last reply. New replies are no longer allowed.