From 242be5f415be11696fafdf4db68f4dafae964c66 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Vi=CC=81ctor=20Falco=CC=81n?= <victoor89@gmail.com>
Date: Fri, 14 Nov 2025 09:17:09 +0100
Subject: [PATCH] feat(traefik): Add secure headers middleware to WhisperMoney
 service

---
 traefik/dynamic/whispermoney.yml | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/traefik/dynamic/whispermoney.yml b/traefik/dynamic/whispermoney.yml
index 3c16fb4b..72c430df 100644
--- a/traefik/dynamic/whispermoney.yml
+++ b/traefik/dynamic/whispermoney.yml
@@ -12,6 +12,8 @@ http:
       entryPoints:
         - websecure
       service: whispermoney
+      middlewares:
+        - headers-secure
       tls: {}
 
   middlewares:
@@ -19,12 +21,19 @@ http:
       redirectScheme:
         scheme: https
         permanent: true
+    headers-secure:
+      headers:
+        customRequestHeaders:
+          X-Forwarded-Proto: https
+        customResponseHeaders:
+          X-Forwarded-Proto: https
 
   services:
     whispermoney:
       loadBalancer:
         servers:
           - url: http://host.docker.internal:8000
+        passHostHeader: true
 
 tls:
   certificates: