freifunk/ansible-config
0
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Update nginx role

Browse source
This commit is contained in:
Alexander Dietrich 2020-03-23 20:43:06 +01:00
parent 1b9aa00d92
commit bbb7c76eef
9 changed files with 46 additions and 17 deletions
roles/nginx/files/snippets
header-hsts.confheader-security.conf

4
roles/nginx/files/snippets/header-hsts.conf
View file

@ -1,2 +1,4 @@
add_header Strict-Transport-Security "max-age=31536000";
add_header Expect-CT "max-age=86400, enforce" always;
add_header Strict-Transport-Security "max-age=31536000" always;
proxy_hide_header Expect-CT;
proxy_hide_header Strict-Transport-Security;

8
roles/nginx/files/snippets/header-security.conf
View file

@ -1,7 +1,7 @@
add_header Referrer-Policy same-origin;
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options sameorigin;
add_header X-XSS-Protection "1; mode=block";
add_header Referrer-Policy same-origin always;
add_header X-Content-Type-Options nosniff always;
add_header X-Frame-Options sameorigin always;
add_header X-XSS-Protection "1; mode=block" always;
proxy_hide_header Referrer-Policy;
proxy_hide_header X-Content-Type-Options;
proxy_hide_header X-Frame-Options;