From ada0553ae2f32f35500fc229447a1144437c0e00 Mon Sep 17 00:00:00 2001 From: "us.nadeko.net" Date: Wed, 14 Aug 2024 16:28:50 -0400 Subject: [PATCH] I forgot about the X-Frame-Options headerw --- nginx/conf.d/lol.zzls.xyz.conf | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/nginx/conf.d/lol.zzls.xyz.conf b/nginx/conf.d/lol.zzls.xyz.conf index 9f0c415..9938509 100644 --- a/nginx/conf.d/lol.zzls.xyz.conf +++ b/nginx/conf.d/lol.zzls.xyz.conf @@ -2,12 +2,16 @@ server { access_log /var/log/nginx/lol.zzls.xyz.access.log; server_name lol.nadeko.net; include configs/general.conf; - include configs/security.conf; include configs/robotsNone.conf; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "same-origin" always; + add_header Permissions-Policy "interest-cohort=()" always; + add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; + location / { - proxy_pass http://127.0.0.1:40010; - include configs/proxy.conf; + proxy_pass http://127.0.0.1:40010; + include configs/proxy.conf; } # QUIC