freifunk/ansible-config
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Update nginx role

Browse source
This commit is contained in:
Alexander Dietrich 2020-03-23 20:43:06 +01:00
commit bbb7c76eef
9 changed files with 46 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

10
roles/nginx/files/openssl.cnf Normal file
View file

@ -0,0 +1,10 @@
openssl_conf = default_conf
[default_conf]
ssl_conf = ssl_sect
[ssl_sect]
system_default = system_default_sect
[system_default_sect]
Ciphersuites = TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256

4
roles/nginx/files/snippets/header-hsts.conf
View file

@ -1,2 +1,4 @@
add_header Strict-Transport-Security "max-age=31536000";
add_header Expect-CT "max-age=86400, enforce" always;
add_header Strict-Transport-Security "max-age=31536000" always;
proxy_hide_header Expect-CT;
proxy_hide_header Strict-Transport-Security;

8
roles/nginx/files/snippets/header-security.conf
View file

@ -1,7 +1,7 @@
add_header Referrer-Policy same-origin;
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options sameorigin;
add_header X-XSS-Protection "1; mode=block";
add_header Referrer-Policy same-origin always;
add_header X-Content-Type-Options nosniff always;
add_header X-Frame-Options sameorigin always;
add_header X-XSS-Protection "1; mode=block" always;
proxy_hide_header Referrer-Policy;
proxy_hide_header X-Content-Type-Options;
proxy_hide_header X-Frame-Options;