adyxax/www
1
0
Fork 0
Code Issues Pull requests Activity Actions

Added container building script and kubernetes manifest

Browse source
This commit is contained in:
Julien Dessaux 2021-11-13 18:42:52 +01:00
parent f89f5d5736
commit 2a6536ad1e
5 changed files with 259 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
deploy/headers_secure.conf Normal file
View file

@ -0,0 +1,10 @@
# A+ on https://securityheaders.io/
add_header X-Frame-Options deny;
add_header X-XSS-Protection "1; mode=block";
add_header X-Content-Type-Options nosniff;
add_header Referrer-Policy strict-origin;
add_header Cache-Control no-transform;
add_header Content-Security-Policy "script-src 'self'";
add_header Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()";
# 6 months HSTS pinning
add_header Strict-Transport-Security max-age=16000000;