From ea33d9fe8ee2075bff5b075b6a67e285fbb344a9 Mon Sep 17 00:00:00 2001
From: Sheogorath <sheogorath@shivering-isles.com>
Date: Mon, 3 Jan 2022 18:27:52 +0100
Subject: [PATCH] feat(ingress-nginx): Enable some ingress features
---
infrastructure/ingress-nginx/release.yaml | 10 ++++++++++
1 file changed, 10 insertions(+)
diff --git a/infrastructure/ingress-nginx/release.yaml b/infrastructure/ingress-nginx/release.yaml
index 0bf79679c..a0d38a980 100644
--- a/infrastructure/ingress-nginx/release.yaml
+++ b/infrastructure/ingress-nginx/release.yaml
@@ -76,6 +76,16 @@ spec:
## Allows customization of the configmap / nginx-configmap namespace
##
configMapNamespace: "" # defaults to $(POD_NAMESPACE)
+
+ # Will add custom configuration options to Nginx https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/
+ config:
+ enable-modsecurity: "true"
+ enable-owasp-modsecurity-crs: "true"
+ enable-ocsp: "true"
+ hsts: "true"
+ hsts-max-age: "63072000"
+ enable-brotli: "true"
+ use-http2: "true"
## Allows customization of the tcp-services-configmap
##
--
GitLab