Initialize clean CSR inventory repository

traefik/dynamic/routes.yml

@@ -0,0 +1,30 @@
+http:
+  routers:
+    inventory:
+      rule: 'Host(`{{ env "APP_HOST" }}`)'
+      entryPoints: [websecure]
+      service: inventory
+      middlewares: [security-headers, compression]
+      tls:
+        certResolver: '{{ env "TRAEFIK_CERT_RESOLVER" }}'
+  services:
+    inventory:
+      loadBalancer:
+        servers:
+          - url: http://web:8000
+        passHostHeader: true
+  middlewares:
+    compression:
+      compress: {}
+    security-headers:
+      headers:
+        contentTypeNosniff: true
+        frameDeny: true
+        referrerPolicy: same-origin
+        stsSeconds: 31536000
+        stsIncludeSubdomains: true
+        stsPreload: true
+        contentSecurityPolicy: "default-src 'self'; base-uri 'self'; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'none'; img-src 'self' data:; object-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'"
+        customResponseHeaders:
+          Server: ""
+          Permissions-Policy: "camera=(), microphone=(), geolocation=()"