mirror of
https://codeberg.org/muon/home.git
synced 2025-12-06 08:07:45 +00:00
Add cross content
This commit is contained in:
parent
a15ee278a5
commit
4edc6a8d5d
1 changed files with 4 additions and 1 deletions
|
|
@ -53,7 +53,7 @@ in with lib; {
|
||||||
# add_header Strict-Transport-Security $hsts_header;
|
# add_header Strict-Transport-Security $hsts_header;
|
||||||
|
|
||||||
# Enable CSP for your services.
|
# Enable CSP for your services.
|
||||||
#add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;
|
add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;
|
||||||
|
|
||||||
# Minimize information leaked to other domains
|
# Minimize information leaked to other domains
|
||||||
add_header 'Referrer-Policy' 'origin-when-cross-origin';
|
add_header 'Referrer-Policy' 'origin-when-cross-origin';
|
||||||
|
|
@ -69,6 +69,9 @@ in with lib; {
|
||||||
|
|
||||||
# required when the server wants to use HTTP Authentication
|
# required when the server wants to use HTTP Authentication
|
||||||
proxy_pass_header Authorization;
|
proxy_pass_header Authorization;
|
||||||
|
|
||||||
|
# This is necessary to pass the correct IP to be hashed
|
||||||
|
real_ip_header X-Real-IP;
|
||||||
'';
|
'';
|
||||||
|
|
||||||
virtualHosts = let
|
virtualHosts = let
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue