feat: add Strict-Transport-Security header in Caddyfile and update MariaDB version in Nextcloud docker-compose

2025-03-14 12:10:48 +01:00 · 2025-03-14 12:10:48 +01:00 · e5eacba0e7
commit e5eacba0e7
parent 0d5b61b2f0
2 changed files with 4 additions and 1 deletions
--- a/config/ansible/tasks/servers/services/caddy/Caddyfile.j2
+++ b/config/ansible/tasks/servers/services/caddy/Caddyfile.j2
@ -23,6 +23,9 @@ cloud.vleeuwen.me cloud.mvl.sh {
    redir /.well-known/caldav /remote.php/dav/ 301
    
    reverse_proxy nextcloud:80
+    header {
+        Strict-Transport-Security "max-age=15552000; includeSubDomains"
+    }
    tls {{ caddy_email }}
 }

--- a/config/ansible/tasks/servers/services/nextcloud/docker-compose.yml.j2
+++ b/config/ansible/tasks/servers/services/nextcloud/docker-compose.yml.j2
@ -1,6 +1,6 @@
 services:
  db:
-    image: mariadb:10.5
+    image: mariadb:11.4
    command: --transaction-isolation=READ-COMMITTED --binlog-format=ROW
    restart: unless-stopped
    volumes: