From 5547fbd7b3966289d928d1eff21d82f03afe3b8b Mon Sep 17 00:00:00 2001
From: Alexander Dietrich <alexander@dietrich.cx>
Date: Fri, 14 Jun 2019 22:12:07 +0200
Subject: [PATCH] Update hopglass-frontend templates

---
 roles/hopglass-frontend/templates/hopglass-config.j2 | 6 ++++++
 roles/hopglass-frontend/templates/nginx-site.j2      | 8 +++++++-
 2 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/roles/hopglass-frontend/templates/hopglass-config.j2 b/roles/hopglass-frontend/templates/hopglass-config.j2
index c32b8a0..2dcf598 100644
--- a/roles/hopglass-frontend/templates/hopglass-config.j2
+++ b/roles/hopglass-frontend/templates/hopglass-config.j2
@@ -53,5 +53,11 @@
         { "site": "ffhh-sued", "name": "Hamburg-Sued" },
         { "site": "ffhh-west", "name": "Hamburg-West" }
     ],
+    "domainNames": [
+        { "domain": "ffhh_nowe", "name": "Hamburg-NordWest" },
+        { "domain": "ffhh_ost", "name": "Hamburg-Ost" },
+        { "domain": "ffhh_sued", "name": "Hamburg-Sued" },
+        { "domain": "ffhh_west", "name": "Hamburg-West" }
+    ],
     "hwImg": []
 }
diff --git a/roles/hopglass-frontend/templates/nginx-site.j2 b/roles/hopglass-frontend/templates/nginx-site.j2
index f68e632..4cdff97 100644
--- a/roles/hopglass-frontend/templates/nginx-site.j2
+++ b/roles/hopglass-frontend/templates/nginx-site.j2
@@ -7,9 +7,15 @@ server {
     ssl_certificate_key {{ hopglass_frontend_tls_key }};
 
     include snippets/header-hsts.conf;
-    include snippets/header-security.conf;
     include snippets/no-unsafe-files.conf;
 
+    add_header Referrer-Policy same-origin;
+    add_header X-Content-Type-Options nosniff;
+    add_header X-XSS-Protection "1; mode=block";
+    proxy_hide_header Referrer-Policy;
+    proxy_hide_header X-Content-Type-Options;
+    proxy_hide_header X-XSS-Protection;
+
     root {{ hopglass_frontend_path }}/build;
 }