Add cross content

This commit is contained in:
muon 2025-01-25 14:28:14 +00:00
parent a15ee278a5
commit 4edc6a8d5d

View file

@ -53,7 +53,7 @@ in with lib; {
# add_header Strict-Transport-Security $hsts_header; # add_header Strict-Transport-Security $hsts_header;
# Enable CSP for your services. # Enable CSP for your services.
#add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always; add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;
# Minimize information leaked to other domains # Minimize information leaked to other domains
add_header 'Referrer-Policy' 'origin-when-cross-origin'; add_header 'Referrer-Policy' 'origin-when-cross-origin';
@ -69,6 +69,9 @@ in with lib; {
# required when the server wants to use HTTP Authentication # required when the server wants to use HTTP Authentication
proxy_pass_header Authorization; proxy_pass_header Authorization;
# This is necessary to pass the correct IP to be hashed
real_ip_header X-Real-IP;
''; '';
virtualHosts = let virtualHosts = let