diff --git a/data.nix b/data.nix index af3786b..d523680 100644 --- a/data.nix +++ b/data.nix @@ -183,6 +183,7 @@ rec { vno4 A ${vno4} vno2 A ${vno2} r1 A ${vno1} + m A ${vno1} @ TXT google-site-verification=sU99fmO8gEJF-0lbOY-IzkovC6MXsP3Gozqrs8BR5OM @ TXT hosted-email-verify=rvyd6h64 diff --git a/hosts/fwminex/configuration.nix b/hosts/fwminex/configuration.nix index 6012fa9..3237a00 100644 --- a/hosts/fwminex/configuration.nix +++ b/hosts/fwminex/configuration.nix @@ -349,6 +349,21 @@ in } encode gzip ''; + "m.jakstys.lt".extraConfig = '' + header { + Strict-Transport-Security "max-age=15768000" + Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'" + X-Content-Type-Options "nosniff" + X-Frame-Options "DENY" + Alt-Svc "h3=\":443\"; ma=86400" + /_/* Cache-Control "public, max-age=31536000, immutable" + } + + root * /var/www/m.jakstys.lt + file_server { + precompressed zstd br gzip + } + ''; "jakstys.lt".extraConfig = '' header { Strict-Transport-Security "max-age=15768000"