fix(nginx): Housekeeping

szinn · Apr 6, 2024 · 8e5dfc9 · 8e5dfc9
1 parent f76b807
commit 8e5dfc9
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/kubernetes/main/apps/networking/nginx/external/helm-release.yaml b/kubernetes/main/apps/networking/nginx/external/helm-release.yaml
@@ -55,7 +55,9 @@ spec:
         client-body-timeout: 120
         client-header-timeout: 120
         enable-brotli: "true"
+        enable-ocsp: "true"
         enable-real-ip: "true"
+        hide-headers: Server,X-Powered-By
         hsts-max-age: 31449600
         keep-alive: 120
         keep-alive-requests: 10000
@@ -71,6 +73,7 @@ spec:
         proxy-body-size: 0
         proxy-buffer-size: 16k
         ssl-protocols: TLSv1.3 TLSv1.2
+        use-forwarded-headers: "true"
       metrics:
         enabled: true
         serviceMonitor: