diff --git a/docker/rootfs/etc/nginx/http.d/default.conf b/docker/rootfs/etc/nginx/http.d/default.conf index f8b8a6d..ef5c44d 100644 --- a/docker/rootfs/etc/nginx/http.d/default.conf +++ b/docker/rootfs/etc/nginx/http.d/default.conf @@ -7,6 +7,13 @@ server { root /wwwroot; index index.html; + location ~ .* { + add_header X-Frame-Options "SAMEORIGIN"; + add_header X-Content-Type-Options "nosniff"; + add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"; + add_header Content-Security-Policy "default-src 'self'; img-src https://*; child-src 'none';"; + } + location ~ ^/feed { rewrite ^/feed$ /it/index.xml last; rewrite ^/feed/.*$ /it/index.xml last; @@ -36,7 +43,6 @@ server { location ~ .* { error_page 404 /it/404.html; } - } gzip on;