self-hosted-simplelogin icon indicating copy to clipboard operation
self-hosted-simplelogin copied to clipboard

Simplify traefik config

Open chrisblech opened this issue 3 months ago • 2 comments

In commit https://github.com/springcomp/self-hosted-simplelogin/commit/3471bb9842112cc2c475a1c8042e9148f5243f9, HSTS configuration is fixed/correctly enabled, but this is implemented via a "local file". This way increases the complexity of the configuration. Furthermore, HSTS is enabled via the entrypoint, which then automatically applies to all services (even other domains) on this host – this may not be desired.

This PR changes all simple-login relating traefik configuration back to labels, and fixes HSTS configuration/activation via explicitely forcing this middleware also for the subdomain.

chrisblech avatar Nov 05 '25 22:11 chrisblech

Thank you.

I was looking for a way to simplify but am not knowledgeable enough in Traefik.

I will test this using Internet.nl and Hardenize which failed on HSTS previously.

springcomp avatar Nov 06 '25 04:11 springcomp

Thank you for hinting to internet.nl and hardenize.

Using these testsuites, I could fix another bug in HSTS config - sorry.

chrisblech avatar Nov 09 '25 18:11 chrisblech

@chrisblech thank a lot for the follow up.

springcomp avatar Nov 24 '25 19:11 springcomp