From 9f3c7ace2dc95ae0279ded1940d5963dccf0e5b6 Mon Sep 17 00:00:00 2001 From: Christian Pointner Date: Sat, 12 Jan 2019 19:50:54 +0100 Subject: move nginx snippets to global files location --- files/common/nginx-snippets/security-headers.conf | 4 ++++ 1 file changed, 4 insertions(+) create mode 100644 files/common/nginx-snippets/security-headers.conf (limited to 'files/common/nginx-snippets/security-headers.conf') diff --git a/files/common/nginx-snippets/security-headers.conf b/files/common/nginx-snippets/security-headers.conf new file mode 100644 index 00000000..b94d479d --- /dev/null +++ b/files/common/nginx-snippets/security-headers.conf @@ -0,0 +1,4 @@ +add_header X-Frame-Options DENY; +add_header X-Content-Type-Options nosniff; +add_header X-XSS-Protection "1; mode=block"; +# add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; img-src 'self'; script-src 'self'; style-src 'self'"; -- cgit v1.2.3