From d1a3fea1c6510ac665115da1754151ccd081afba Mon Sep 17 00:00:00 2001
From: Jean Froment <jean.froment@apalia.net>
Date: Sun, 3 Mar 2019 11:59:26 +0100
Subject: [PATCH] Test SSL redirect to Nextcloud

---
 docker-compose.yml | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 5d21a45..9d2c2c6 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -247,7 +247,15 @@ services:
             - 'traefik.tautulli.backend=nextcloud'
             - "traefik.basic.port=443"
             - "traefik.basic.protocol=https"
-            - "traefik.basic.frontend.headers.STSSeconds=15552000"
+            - "traefik.frontend.headers.SSLRedirect=true"
+            - "traefik.frontend.headers.STSSeconds=315360000"
+            - "traefik.frontend.headers.browserXSSFilter=true"
+            - "traefik.frontend.headers.contentTypeNosniff=true"
+            - "traefik.frontend.headers.forceSTSHeader=true"
+            - "traefik.frontend.headers.SSLHost=${TRAEFIK_DOMAIN}"
+            - "traefik.frontend.headers.STSIncludeSubdomains=true"
+            - "traefik.frontend.headers.STSPreload=true"
+            - "traefik.frontend.headers.frameDeny=true"
             - "traefik.basic.frontend.headers.referrerPolicy=no-referrer"
             - 'traefik.tautulli.frontend.rule=Host:nextcloud.${TRAEFIK_DOMAIN}'
             - 'traefik.frontend.auth.basic.users=${HTTP_USER}:${HTTP_PASSWORD}'