# Traefik dynamic-config reference: the doxa-maps frame-policy split
# (documentation/architecture/embeddability.md). Adjust host/service names to your deploy.
# Direct-embed pages (>=2 path segments under the tree) must be framable anywhere;
# staging pages stay preview-only. frame-ancestors is header-only, so the proxy
# owns this — the bundler can only document and template it.
http:
  middlewares:
    doxa-maps-embed-framable:
      headers:
        customResponseHeaders:
          Content-Security-Policy: "frame-ancestors *"
          X-Frame-Options: ""
  routers:
    doxa-maps-embed-pages:
      rule: "PathRegexp(`^/doxa-maps/[^/]+/[^/]+/`)"
      priority: 70            # above the site catch-all
      middlewares: [doxa-maps-embed-framable]
      service: your-static-service