add wikijs HSTS and CSP label

2026-03-05 14:48:36 +01:00
parent 0e48519a55
commit f31583e234
2 changed files with 29 additions and 0 deletions
--- a/README.md
+++ b/README.md
@@ -103,6 +103,11 @@ Example variables
  wikijs_db_password: 'please-vault-this-too'
  wikijs_custom_css:
  - custom.css
+  wikijs_custom_hsts_stsSeconds : "31536000"
+  wikijs_custom_hsts_stsIncludeSubdomains : true
+  wikijs_custom_hsts_stsPreload : true
+  wikijs_custom_hsts_forceSTSHeader : true
+  wikijs_custom_csp : "default-src 'self' 'unsafe-inline' data: https://www.test.com https://www.test2.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.test.com;"

  pgadmin_domain: 'pgadmin.example.com'
  pgadmin_email: 'admin@example.com'