Set HSTS by default

services/traefik/configs/traefik.yml

@@ -25,6 +25,8 @@ entryPoints:
     address: :443
     http:
       tls: {}
+      middlewares:
+        - hsts@file
 
 global:
   sendAnonymousUsage: false

services/traefik/volumes/config/hsts.yml

@@ -0,0 +1,9 @@
+http:
+  middlewares:
+    hsts:
+      headers:
+        frameDeny: true
+        browserXssFilter: true
+        stsSeconds: 31536000 # 1 year
+        stsPreload: true
+        stsIncludeSubdomains: true