Upgrade to SWS v3 and enable TLS - certificate mounting required

This commit is contained in:
2026-09-01 11:30:39 +01:00
parent 9d35b3a2dd
commit 010073dabf
2 changed files with 14 additions and 4 deletions

View File

@@ -5,8 +5,8 @@ RUN pip install --no-cache-dir -r requirements.txt
COPY . . COPY . .
RUN mkdocs build --clean RUN mkdocs build --clean
FROM joseluisq/static-web-server:2 FROM joseluisq/static-web-server:3
COPY config.toml /config.toml COPY config.toml /config.toml
COPY --from=builder /docs/site /public COPY --from=builder /docs/site /public
ENV SWS_CONFIG_FILE=/config.toml ENV SERVER_CONFIG_FILE=/config.toml
EXPOSE 8080 EXPOSE 8080

View File

@@ -1,14 +1,24 @@
[general] [general]
host = "0.0.0.0" host = "0.0.0.0"
port = 8080 port = 8443
root = "/public" root = "/public"
log-level = "error" log-level = "error"
compression = true compression = true
tls = true
tls-cert = "/tls/tls.crt"
tls-key = "/tls/tls.key"
http2 = true
security-headers = true
[advanced]
[[advanced.headers]] [[advanced.headers]]
source = "**/*" source = "**/*"
[advanced.headers.headers] [advanced.headers.headers]
"X-Frame-Options" = "DENY"
"X-Content-Type-Options" = "nosniff" "X-Content-Type-Options" = "nosniff"
"Referrer-Policy" = "strict-origin-when-cross-origin" "Referrer-Policy" = "strict-origin-when-cross-origin"
"Content-Security-Policy" = "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;" "Content-Security-Policy" = "default-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:;"