Refactor traefik dynamic config for middlewares

traefik/config/middlewares/default.yml

@@ -0,0 +1,9 @@
+# /services/traefik/config/middlewares/default-chain.yml
+
+http:
+  middlewares:
+    default-chain:
+      chain:
+        middlewares:
+          - favicon-injection
+          - security-headers

traefik/config/middlewares/security-headers.yml

@@ -1,12 +1,8 @@
-# /services/traefik/config/security.yml
+# /services/traefik/config/middlewares/security-headers.yml
 
 http:
   middlewares:
-    default-security:
-      chain:
-        middlewares:
-          - secure-headers
-    secure-headers:
+    security-headers:
       headers:
         hostsProxyHeaders:
           - X-Forwarded-Host

traefik/traefik.yml

@@ -18,7 +18,7 @@ entryPoints:
     address: :443
     http:
       middlewares:
-        - default-security
+        - default-chain
       tls:
         certResolver: letsencrypt
 
@@ -33,4 +33,10 @@ certificatesResolvers:
     # caServer: https://acme-staging-v02.api.letsencrypt.org/directory # use staging server instead of production
       email: mail@eliasfink.de
       storage: /etc/traefik/certs/acme.json
-      tlsChallenge: {}
+      tlsChallenge: {}
+
+experimental:
+  plugins:
+    rewritebody:
+      moduleName: "github.com/traefik/plugin-rewritebody"
+      version: "v0.3.1"