fix(ingress-nginx): properly enable user snippets

This commit is contained in:
JJGadgets
2023-10-17 03:37:34 +08:00
parent 22f89d04ff
commit 4f38236b17

View File

@@ -52,7 +52,7 @@ spec:
keep-alive: 10
large-client-header-buffers: 2 2k # hardened near CIS benchmarks of 2 1k, but needs increase due to auth services (e.g. Kanidm, Authentik, CloudFlare Zero Trust)
block-user-agents: "GPTBot,~*GPTBot*,ChatGPT-User,~*ChatGPT-User*,Google-Extended,~*Google-Extended*,CCBot,~*CCBot*,Omgilibot,~*Omgilibot*,FacebookBot,~*FacebookBot*" # taken from https://github.com/superseriousbusiness/gotosocial/blob/main/internal/web/robots.go
allowSnippetAnnotations: "true" # used for authentik auth snippets
allow-snippet-annotations: "true" # used for authentik auth snippets
resources:
requests:
cpu: 10m