# Application-specific Traefik middlewares
# These are loaded by the application infrastructure, not the external Traefik

http:
  middlewares:
    # Large upload middleware for Gitea registry
    gitea-large-upload:
      buffering:
        maxRequestBodyBytes: 5368709120   # 5GB
        memRequestBodyBytes: 104857600    # 100MB
        maxResponseBodyBytes: 5368709120  # 5GB
        memResponseBodyBytes: 104857600   # 100MB
        retryExpression: "IsNetworkError() && Attempts() < 3"
    
    # Rate limiting for public APIs
    api-ratelimit:
      rateLimit:
        average: 100
        burst: 50
        period: 1s
    
    # Security headers
    security-headers:
      headers:
        frameDeny: true
        sslRedirect: true
        browserXssFilter: true
        contentTypeNosniff: true
        stsIncludeSubdomains: true
        stsPreload: true
        stsSeconds: 31536000