doxa-maps/serving/traefik-embed-headers.yaml
doxa-maps e800f10681
Some checks are pending
Deploy to GitHub Pages / build (push) Waiting to run
Deploy to GitHub Pages / deploy (push) Blocked by required conditions
Frame-policy as a real artifact + docs discoverability
- The build now emits public/_headers implementing the embeddability split
  (direct-embed pages framable anywhere; staging preview-only) — Netlify/CF
  Pages consume it automatically; serving/traefik-embed-headers.yaml is the
  proxy-side reference. The contract is auditable in-repo, not just documented.
- README: docs table gains how-to, layouts/README (the SPA machinery), and
  docs/architecture; Quickstart gains bun run serve + bun run phone.
2026-09-16 02:37:19 +00:00

18 lines
788 B
YAML

# Traefik dynamic-config reference: the doxa-maps frame-policy split
# (docs/architecture/embeddability.md). Adjust host/service names to your deploy.
# Direct-embed pages (>=2 path segments under the tree) must be framable anywhere;
# staging pages stay preview-only. frame-ancestors is header-only, so the proxy
# owns this — the bundler can only document and template it.
http:
middlewares:
doxa-maps-embed-framable:
headers:
customResponseHeaders:
Content-Security-Policy: "frame-ancestors *"
X-Frame-Options: ""
routers:
doxa-maps-embed-pages:
rule: "PathRegexp(`^/doxa-maps/[^/]+/[^/]+/`)"
priority: 70 # above the site catch-all
middlewares: [doxa-maps-embed-framable]
service: your-static-service