apiVersion: traefik.io/v1alpha1
kind: Middleware
metadata:
  name: security-headers
  labels:
    app.kubernetes.io/name: traefik
    app.kubernetes.io/instance: traefik-dev
    app.kubernetes.io/component: ingress-controller
    app.kubernetes.io/part-of: platform
    app.kubernetes.io/managed-by: kustomize
spec:
  headers:
    contentTypeNosniff: true
    browserXssFilter: true
    referrerPolicy: strict-origin-when-cross-origin
    frameDeny: true