Struct SecurityHeadersConfig 

pub struct SecurityHeadersConfig {
    pub enabled: bool,
    pub hsts: String,
    pub content_type_options: String,
    pub referrer_policy: String,
    pub frame_options: String,
    pub csp: String,
    pub extra: HashMap<String, String>,
}

Security response headers the proxy adds to every response it returns — add-if-absent, so a backend that sets its own Content-Security-Policy, X-Frame-Options, Strict-Transport-Security, etc. is never overridden (pass-through-plus-defaults, as Traefik/Caddy do). HSTS is applied only to HTTPS responses. The defaults are deliberately non-breaking; X-Frame-Options and CSP are off by default (they break iframe-embedded apps and most apps respectively) and are opt-in here or per app.

Fields

enabled: bool

Master switch. Default true.

hsts: String

Strict-Transport-Security value (HTTPS responses only). Empty disables HSTS. Default max-age=31536000 (1y, no includeSubDomains/preload).

content_type_options: String

X-Content-Type-Options value. Empty disables. Default nosniff.

referrer_policy: String

Referrer-Policy value. Empty disables. Default strict-origin-when-cross-origin.

frame_options: String

X-Frame-Options value. Empty (default) = off — leave it to apps, since SAMEORIGIN/DENY break services meant to be embedded in an iframe.

csp: String

Content-Security-Policy value. Empty (default) = off — a blanket CSP breaks most apps; set per app instead.

extra: HashMap<String, String>

Arbitrary extra response headers to add-if-absent (name → value).

Trait Implementations

impl Clone for SecurityHeadersConfig

fn clone(&self) -> SecurityHeadersConfig

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for SecurityHeadersConfig

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl Default for SecurityHeadersConfig

fn default() -> SecurityHeadersConfig

Returns the “default value” for a type.

impl<'de> Deserialize<'de> for SecurityHeadersConfig

fn deserialize<__D>( __deserializer: __D, ) -> Result<SecurityHeadersConfig, <__D as Deserializer<'de>>::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for SecurityHeadersConfig

fn serialize<__S>( &self, __serializer: __S, ) -> Result<<__S as Serializer>::Ok, <__S as Serializer>::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.