feat: apply security annotations to webapp-ingress

Signed-off-by: Stefano Cappa <[email protected]>
home-anthill · Jul 27, 2024 · 07ef9e1 · 07ef9e1
1 parent c3ca616
commit 07ef9e1
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/home-anthill/templates/ingress-webapp.yaml b/home-anthill/templates/ingress-webapp.yaml
@@ -8,6 +8,11 @@ metadata:
     cert-manager.io/issuer: "cert-issuer-webapp"
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
     nginx.ingress.kubernetes.io/redirect-to-https: "true"
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      add_header X-Frame-Options "sameorigin";
+      add_header X-Content-Type-Options nosniff;
+      add_header Referrer-Policy 'same-origin';
+      add_header Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()";
   {{- end }}
   namespace: {{ .Values.namespace }}
 spec: