mirror of
https://github.com/TeamPiped/Piped-Docker.git
synced 2024-08-14 23:56:53 +00:00
Update varnish and headers (#4)
* update varnish * update headers * Indent with 4 spaces. Co-authored-by: FireMasterK <20838718+FireMasterK@users.noreply.github.com>
This commit is contained in:
parent
0db53dcbeb
commit
5862e8354a
2 changed files with 70 additions and 30 deletions
|
@ -1,48 +1,88 @@
|
||||||
{
|
{
|
||||||
servers :443 {
|
servers :443 {
|
||||||
protocol {
|
protocol {
|
||||||
experimental_http3
|
experimental_http3
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
FRONTEND_HOSTNAME {
|
FRONTEND_HOSTNAME {
|
||||||
reverse_proxy pipedfrontend:80
|
reverse_proxy pipedfrontend:80
|
||||||
|
header {
|
||||||
|
# disable FLoC tracking
|
||||||
|
Permissions-Policy interest-cohort=()
|
||||||
|
|
||||||
|
# enable HSTS
|
||||||
|
Strict-Transport-Security max-age=31536000;
|
||||||
|
|
||||||
|
# keep referrer data off
|
||||||
|
Referrer-Policy no-referrer
|
||||||
|
|
||||||
|
# prevent for appearing in search engine for private instances (option)
|
||||||
|
#X-Robots-Tag noindex
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
BACKEND_HOSTNAME {
|
BACKEND_HOSTNAME {
|
||||||
reverse_proxy varnish:80
|
reverse_proxy varnish:80
|
||||||
|
header {
|
||||||
|
# disable FLoC tracking
|
||||||
|
Permissions-Policy interest-cohort=()
|
||||||
|
|
||||||
|
# enable HSTS
|
||||||
|
Strict-Transport-Security max-age=31536000;
|
||||||
|
|
||||||
|
# keep referrer data off
|
||||||
|
Referrer-Policy no-referrer
|
||||||
|
|
||||||
|
# prevent for appearing in search engine for private instances (option)
|
||||||
|
#X-Robots-Tag noindex
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
||||||
PROXY_HOSTNAME {
|
PROXY_HOSTNAME {
|
||||||
|
|
||||||
@ytproxy path /videoplayback* /api/v4/* /api/manifest/*
|
@ytproxy path /videoplayback* /api/v4/* /api/manifest/*
|
||||||
|
|
||||||
@optionscall {
|
@optionscall {
|
||||||
method OPTIONS
|
method OPTIONS
|
||||||
}
|
|
||||||
|
|
||||||
header Access-Control-Allow-Origin *
|
|
||||||
header Access-Control-Allow-Headers *
|
|
||||||
|
|
||||||
route {
|
|
||||||
|
|
||||||
header @ytproxy {
|
|
||||||
Cache-Control private always
|
|
||||||
}
|
}
|
||||||
|
|
||||||
header / {
|
header {
|
||||||
Cache-Control "public, max-age=604800"
|
Access-Control-Allow-Origin *
|
||||||
|
Access-Control-Allow-Headers *
|
||||||
|
|
||||||
|
# disable FLoC tracking
|
||||||
|
Permissions-Policy interest-cohort=()
|
||||||
|
|
||||||
|
# enable HSTS
|
||||||
|
Strict-Transport-Security max-age=31536000;
|
||||||
|
|
||||||
|
# keep referrer data off
|
||||||
|
Referrer-Policy no-referrer
|
||||||
|
|
||||||
|
# prevent for appearing in search engine for private instances (option)
|
||||||
|
#X-Robots-Tag noindex
|
||||||
}
|
}
|
||||||
|
|
||||||
respond @optionscall 200
|
route {
|
||||||
|
|
||||||
reverse_proxy unix//var/run/ytproxy/http-proxy.sock {
|
header @ytproxy {
|
||||||
header_up -CF-Connecting-IP
|
Cache-Control private always
|
||||||
header_up -X-Forwarded-For
|
}
|
||||||
header_down -Access-Control-Allow-Origin
|
|
||||||
header_down -etag
|
header / {
|
||||||
header_down -alt-svc
|
Cache-Control "public, max-age=604800"
|
||||||
|
}
|
||||||
|
|
||||||
|
respond @optionscall 200
|
||||||
|
|
||||||
|
reverse_proxy unix//var/run/ytproxy/http-proxy.sock {
|
||||||
|
header_up -CF-Connecting-IP
|
||||||
|
header_up -X-Forwarded-For
|
||||||
|
header_down -Access-Control-Allow-Origin
|
||||||
|
header_down -etag
|
||||||
|
header_down -alt-svc
|
||||||
|
}
|
||||||
}
|
}
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
|
@ -21,7 +21,7 @@ services:
|
||||||
- postgres
|
- postgres
|
||||||
container_name: piped-backend
|
container_name: piped-backend
|
||||||
varnish:
|
varnish:
|
||||||
image: varnish:6.6-alpine
|
image: varnish:7.0-alpine
|
||||||
restart: unless-stopped
|
restart: unless-stopped
|
||||||
volumes:
|
volumes:
|
||||||
- ./config/default.vcl:/etc/varnish/default.vcl:ro
|
- ./config/default.vcl:/etc/varnish/default.vcl:ro
|
||||||
|
|
Loading…
Reference in a new issue