review-apps-values.yaml 1.63 KB
Newer Older
Dominik Hebeler's avatar
Dominik Hebeler committed
1
2
postgresql:
    enabled: false
Dominik Hebeler's avatar
Dominik Hebeler committed
3
4
hpa: 
  enabled: false
5
resources:
Dominik Hebeler's avatar
Dominik Hebeler committed
6
7
  requests:
  limits:
Dominik Hebeler's avatar
Dominik Hebeler committed
8
9
ingress: 
  annotations: 
10
    kubernetes.io/tls-acme: "false"
Dominik Hebeler's avatar
Dominik Hebeler committed
11
    nginx.ingress.kubernetes.io/ssl-redirect: "false"
Dominik Hebeler's avatar
Dominik Hebeler committed
12
13
    nginx.ingress.kubernetes.io/client-body-buffer-size: "30m"
    nginx.ingress.kubernetes.io/proxy-body-size: "30m"
Dominik Hebeler's avatar
Dominik Hebeler committed
14
    nginx.ingress.kubernetes.io/configuration-snippet: |
Dominik Hebeler's avatar
Dominik Hebeler committed
15
      more_set_headers "Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; script-src-elem 'self' 'unsafe-inline'; script-src-attr 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; style-src-elem 'self' 'unsafe-inline'; style-src-attr 'self' 'unsafe-inline'; img-src 'self' data:; font-src 'self'; connect-src 'self'; media-src; object-src; prefetch-src; child-src; frame-src 'self'; worker-src; frame-ancestors 'self' https://scripts.zdv.uni-mainz.de; form-action 'self' www.paypal.com; base-uri; manifest-src; plugin-types; report-uri; report-to";
16
      more_set_headers "X-Frame-Options: sameorigin";
Dominik Hebeler's avatar
Dominik Hebeler committed
17
18
19
      more_set_headers "X-Content-Type-Options: nosniff";
      more_set_headers "ReferrerPolicy: origin";
      more_set_headers "X-XSS-Protection: 1; mode=block";
20
      more_set_headers "Permissions-Policy: interest-cohort=()";
21
22
23
      if ($arg_out = "results-with-style") {
        more_set_headers "X-Frame-Options: allow-from https://scripts.zdv.uni-mainz.de/";
      }
Dominik Hebeler's avatar
Dominik Hebeler committed
24
  tls: 
25
    enabled: false
Dominik Hebeler's avatar
Dominik Hebeler committed
26
27
service: 
  commonName: ""
Dominik Hebeler's avatar
Dominik Hebeler committed
28
29
  externalPort: 80
  internalPort: 80
30
deploymentApiVersion: apps/v1
31
resourcesPhpfpm: 
32
33
  requests:
  limits:
34
resourcesNginx: 
35
36
  requests:
  limits:
37
resourcesRedis: 
38
39
  requests:
  limits:
40
resourcesFetcher: 
41
  requests:
Dominik Hebeler's avatar
Dominik Hebeler committed
42
  limits: