curaflow/k8s/strip-hsts.yaml

21 lines
484 B
YAML

apiVersion: apisix.apache.org/v2
kind: ApisixPluginConfig
metadata:
name: strip-hsts
namespace: keycloak
spec:
plugins:
- name: proxy-rewrite
enable: true
config:
headers:
X-Forwarded-Proto: "https"
X-Forwarded-Port: "443"
- name: response-rewrite
enable: true
config:
headers:
Strict-Transport-Security: ""
X-Frame-Options: ""
Content-Security-Policy: "frame-src *; frame-ancestors *; object-src 'none';"