aboutsummaryrefslogtreecommitdiff
path: root/deploy/headers_secure.conf
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--deploy/headers_secure.conf10
1 files changed, 10 insertions, 0 deletions
diff --git a/deploy/headers_secure.conf b/deploy/headers_secure.conf
new file mode 100644
index 0000000..71b52e1
--- /dev/null
+++ b/deploy/headers_secure.conf
@@ -0,0 +1,10 @@
+# A+ on https://securityheaders.io/
+add_header X-Frame-Options deny;
+add_header X-XSS-Protection "1; mode=block";
+add_header X-Content-Type-Options nosniff;
+add_header Referrer-Policy strict-origin;
+add_header Cache-Control no-transform;
+add_header Content-Security-Policy "script-src 'self'";
+add_header Permissions-Policy "accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()";
+# 6 months HSTS pinning
+add_header Strict-Transport-Security max-age=16000000;