nginx: headers only main nginx

resolve the headers only in the NGINX that serves HTTPS and not in the container
This commit is contained in:
Jesús 2021-10-25 15:17:48 -05:00
parent d28adfa173
commit 1693bd969b
No known key found for this signature in database
GPG Key ID: F6EE7BC59A315766

View File

@ -328,17 +328,6 @@ EOF
access_log off; access_log off;
error_log off; error_log off;
# Aditional Security Headers
# ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
add_header X-Frame-Options DENY always;
# ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
add_header X-Content-Type-Options nosniff always;
# ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
add_header X-Xss-Protection "1; mode=block" always;
root /usr/share/webapps/cgit; root /usr/share/webapps/cgit;
try_files \$uri @cgit; try_files \$uri @cgit;