m.jakstys.lt

hosts/fwminex/configuration.nix

@@ -349,6 +349,21 @@ in
           }
           encode gzip
         '';
+        "m.jakstys.lt".extraConfig = ''
+          header {
+            Strict-Transport-Security "max-age=15768000"
+            Content-Security-Policy "default-src 'self'; style-src 'self' 'unsafe-inline'"
+            X-Content-Type-Options "nosniff"
+            X-Frame-Options "DENY"
+            Alt-Svc "h3=\":443\"; ma=86400"
+            /_/* Cache-Control "public, max-age=31536000, immutable"
+          }
+
+          root * /var/www/m.jakstys.lt
+          file_server {
+            precompressed zstd br gzip
+          }
+        '';
         "jakstys.lt".extraConfig = ''
           header {
             Strict-Transport-Security "max-age=15768000"