feat: element headers

compose.yaml

@@ -4,6 +4,8 @@ services:
     image: "$IMAGEAPP"
     restart: unless-stopped
     ports:
-      - "8080:80"
+      - "8080:8080"
+    environment:
+      - ELEMENT_WEB_PORT=8080
     volumes:
       - ./config/config.json:/app/config.json:ro

manifests/common/app.yaml

@@ -5,6 +5,20 @@ metadata:
   name: app
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt-prod
+    nginx.org/location-snippets:
+    nginx.ingress.kubernetes.io/configuration-snippet: |
+      more_set_headers X-Frame-Options SAMEORIGIN;
+      more_set_headers X-Content-Type-Options nosniff;
+      more_set_headers X-XSS-Protection "1; mode=block";
+      more_set_headers Content-Security-Policy "frame-ancestors 'self'";
+
+    nginx.ingress.kubernetes.io/server-snippet: |
+      if ($request_uri = "/") {
+        more_set_headers "Cache-Control: no-cache";
+      }
+      if ($request_uri ~* "^/(config.*\.json|i18n|home|sites|index\.html)$") {
+        more_set_headers "Cache-Control: no-cache, no-store, must-revalidate";
+      }
 spec:
   ingressClassName: nginx
   tls:
@@ -58,7 +72,10 @@ spec:
           image: "$IMAGEAPP"
           ports:
             - name: http
-              containerPort: 80
+              containerPort: 8080
+          env:
+            - name: ELEMENT_WEB_PORT
+              value: 8080
           volumeMounts:
             - name: config
               mountPath: /app/config.json