motiejus
/
config
1
Fork 0
Code Packages Releases Activity

more observatory headers 

https://developer.mozilla.org/en-US/observatory/analyze?host=git.jakstys.lt
This commit is contained in:
Motiejus Jakštys 2024-08-24 16:27:29 +03:00
parent f929079fe2
commit 37239ac18a
2 changed files with 16 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
hosts/fwminex/configuration.nix
View File

@ -244,14 +244,15 @@ in
encode gzip encode gzip
''; '';
"jakstys.lt".extraConfig = '' "jakstys.lt".extraConfig = ''
header Strict-Transport-Security "max-age=31536000" header {
header Content-Security-Policy "default-src 'self'" Strict-Transport-Security "max-age=2592000"
header X-Content-Type-Options "nosniff" Content-Security-Policy "default-src 'self'"
header Content-Security-Policy "frame-ancestors 'none'" X-Content-Type-Options "nosniff"
header X-Frame-Options "DENY" Content-Security-Policy "frame-ancestors 'none'"
X-Frame-Options "DENY"
/_/* Cache-Control "public, max-age=31536000, immutable"
header /_/* Cache-Control "public, max-age=31536000, immutable" }
root * /var/www/jakstys.lt root * /var/www/jakstys.lt
file_server { file_server {

8
modules/services/gitea/default.nix
View File

@ -85,6 +85,14 @@
} }
} }
header {
Strict-Transport-Security "max-age=2592000"
Content-Security-Policy "default-src 'self'"
X-Content-Type-Options "nosniff"
Content-Security-Policy "frame-ancestors 'none'"
X-Frame-Options "DENY"
}
reverse_proxy 127.0.0.1:${toString myData.ports.gitea} reverse_proxy 127.0.0.1:${toString myData.ports.gitea}
''; '';
}; };