From 15ce28f5f8942de734ae4e83fb6e0fed52d5c64f Mon Sep 17 00:00:00 2001 From: paspo Date: Thu, 10 Oct 2024 14:46:50 +0200 Subject: [PATCH] some extra headers --- docker/rootfs/etc/nginx/http.d/default.conf | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/docker/rootfs/etc/nginx/http.d/default.conf b/docker/rootfs/etc/nginx/http.d/default.conf index f8b8a6d..ef5c44d 100644 --- a/docker/rootfs/etc/nginx/http.d/default.conf +++ b/docker/rootfs/etc/nginx/http.d/default.conf @@ -7,6 +7,13 @@ server { root /wwwroot; index index.html; + location ~ .* { + add_header X-Frame-Options "SAMEORIGIN"; + add_header X-Content-Type-Options "nosniff"; + add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload"; + add_header Content-Security-Policy "default-src 'self'; img-src https://*; child-src 'none';"; + } + location ~ ^/feed { rewrite ^/feed$ /it/index.xml last; rewrite ^/feed/.*$ /it/index.xml last; @@ -36,7 +43,6 @@ server { location ~ .* { error_page 404 /it/404.html; } - } gzip on;