52 lines
1.5 KiB
YAML
52 lines
1.5 KiB
YAML
apiVersion: gateway.networking.k8s.io/v1
|
|
kind: HTTPRoute
|
|
metadata:
|
|
name: unifi-route
|
|
namespace: unifi
|
|
spec:
|
|
parentRefs:
|
|
- group: gateway.networking.k8s.io
|
|
kind: Gateway
|
|
name: gateway-internal
|
|
namespace: envoy-gateway
|
|
sectionName: unifi
|
|
hostnames:
|
|
- "unifi.jsme.be"
|
|
rules:
|
|
- matches:
|
|
- path:
|
|
type: PathPrefix
|
|
value: /
|
|
filters:
|
|
- type: URLRewrite
|
|
urlRewrite:
|
|
hostname: "unifi.local"
|
|
- type: RequestHeaderModifier
|
|
requestHeaderModifier:
|
|
set:
|
|
- name: X-Forwarded-Host
|
|
value: "unifi.jsme.be"
|
|
- name: X-Forwarded-Proto
|
|
value: https
|
|
- name: Origin
|
|
value: "https://unifi.local"
|
|
- type: ResponseHeaderModifier
|
|
responseHeaderModifier:
|
|
set:
|
|
- name: Strict-Transport-Security
|
|
value: "max-age=31536000; includeSubDomains"
|
|
- name: X-Content-Type-Options
|
|
value: nosniff
|
|
- name: X-Frame-Options
|
|
value: SAMEORIGIN
|
|
- name: Referrer-Policy
|
|
value: strict-origin-when-cross-origin
|
|
- name: Permissions-Policy
|
|
value: "camera=(), microphone=(), geolocation=(), payment=()"
|
|
backendRefs:
|
|
- name: unifi
|
|
port: 443
|
|
kind: Service
|
|
group: ""
|
|
weight: 1
|