nginx: headers only main nginx
resolve the headers only in the NGINX that serves HTTPS and not in the container
This commit is contained in:
parent
d28adfa173
commit
1693bd969b
@ -328,17 +328,6 @@ EOF
|
|||||||
access_log off;
|
access_log off;
|
||||||
error_log off;
|
error_log off;
|
||||||
|
|
||||||
# Aditional Security Headers
|
|
||||||
|
|
||||||
# ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
|
|
||||||
add_header X-Frame-Options DENY always;
|
|
||||||
|
|
||||||
# ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Content-Type-Options
|
|
||||||
add_header X-Content-Type-Options nosniff always;
|
|
||||||
|
|
||||||
# ref: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-XSS-Protection
|
|
||||||
add_header X-Xss-Protection "1; mode=block" always;
|
|
||||||
|
|
||||||
root /usr/share/webapps/cgit;
|
root /usr/share/webapps/cgit;
|
||||||
try_files \$uri @cgit;
|
try_files \$uri @cgit;
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user