first commit

dockers/traefik/conf/dynamic/certificates.yml.tmpl

@@ -0,0 +1,20 @@
+#tls:
+#  certificates:
+#    - certFile: __SSL_CERT__
+#      keyFile: __SSL_KEY__
+#
+#  stores:
+#    default:
+#      defaultCertificate:
+#        certFile: __SSL_CERT__
+#        keyFile: __SSL_KEY__
+#  options:
+#    default:
+#      minVersion: VersionTLS12
+#      cipherSuites:
+#        - TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
+#        - TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
+#        - TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
+#        - TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
+#        - TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305
+#        - TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305

dockers/traefik/conf/dynamic/conf.yml

@@ -0,0 +1,17 @@
+http:
+  middlewares:
+    hsts:
+      headers:
+        stsincludesubdomains: true
+        stspreload: true
+        stsseconds: 31536000 # 1 an
+    nextcloud-redirectregex1:
+      redirectregex:
+        permanent: true
+        regex: https?://([^/]*)/.well-known/(card|cal)dav
+        replacement: https://${1}/remote.php/dav/
+    nextcloud-redirectregex2:
+      redirectregex:
+        permanent: true
+        regex: https?://([^/]*)(/.well-known[^#]*)
+        replacement: https://${1}/index.php${2}