- GreenMail Fix From PRIV -> Disabled

- New IDP GUI

patterns/Base_Security_Response_Headers_36886a1934993d1f69690e1d.yml

@@ -7,12 +7,4 @@ pattern:
   notes: "The security response headers, which are environment independent and/or\
     \ static"
   properties:
-    responseHeaders:
-    - Strict-Transport-Security: "max-age=63072000; includeSubDomains;"
-    - X-Content-Type-Options: "nosniff"
-    - Referrer-Policy: "strict-origin-when-cross-origin"
-    - X-Frame-Options: "DENY"
-    - Cross-Origin-Opener-Policy: "same-origin"
-    - Cross-Origin-Embedder-Policy: "require-corp"
-    - Cross-Origin-Resource-Policy: "same-site"
-    - Permissions-Policy: "geolocation=(), camera=(), microphone=(), interest-cohort=()"
+    responseHeaders: "var://base-security-response-headers-response-headers"

patterns/GreenMail_f010ec68088ebd56349c7135.yml

@@ -9,6 +9,8 @@ pattern:
     path: "/mail/"
     realm:
     - "pattern://7518c6cc61e47eec6322ae17"
+    addons:
+    - "pattern://4c0d206244a4e16e9aa49f5c"
     backends: "var://greenmail-backend-addresses"
     hostnameCheck: "disabled"
     hostHeader: "backend"

patterns/_GreenMail-OP-Headers_4c0d206244a4e16e9aa49f5c.yml

@@ -0,0 +1,7 @@
+schemaVersion: "1.0"
+pattern:
+  id: "4c0d206244a4e16e9aa49f5c"
+  className: "ch.nevis.admin.v4.plugin.nevisproxy.patterns.HeaderCustomization"
+  name: " GreenMail-OP-Headers"
+  properties:
+    responseHeaders: "var://greenmail-op-headers-response-headers"

variables.yml

@@ -50,6 +50,23 @@ variables:
       secretPreserving: true
     value: null
     requireOverloading: true
+  base-security-response-headers-response-headers:
+    className: "ch.nevis.admin.v4.plugin.base.generation.property.KeyValueProperty"
+    parameters:
+      minRequired: 1
+      separators:
+      - ":"
+      switchedSeparators: []
+    value:
+    - Strict-Transport-Security: "max-age=63072000; includeSubDomains;"
+    - X-Content-Type-Options: "nosniff"
+    - Referrer-Policy: "strict-origin-when-cross-origin"
+    - X-Frame-Options: "DENY"
+    - Cross-Origin-Opener-Policy: "same-origin"
+    - Cross-Origin-Embedder-Policy: "require-corp"
+    - Cross-Origin-Resource-Policy: "same-site"
+    - Permissions-Policy: "geolocation=(), camera=(), microphone=(), interest-cohort=()"
+    requireOverloading: true
   cert-login-template-parameters:
     className: "ch.nevis.admin.v4.plugin.base.generation.property.TextProperty"
     parameters:
@@ -100,6 +117,15 @@ variables:
       pathInputMode: "OPTIONAL"
     value: "http://rainloop.adn-agov-mail-01-dev/"
     requireOverloading: true
+  greenmail-op-headers-response-headers:
+    className: "ch.nevis.admin.v4.plugin.base.generation.property.KeyValueProperty"
+    parameters:
+      separators:
+      - ":"
+      switchedSeparators: []
+    value:
+    - X-Frame-Options: "DENY"
+    requireOverloading: true
   idm-admin-settings:
     className: "ch.nevis.admin.v4.plugin.base.generation.property.KeyValueProperty"
     parameters: