fatchan
/
jschan
mirror of https://gitgud.io/fatchan/jschan.git
1
1
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'master' into new-dev

Browse Source
indiachan-spamvector
Thomas Lynch 3 years ago
parent 331c9e8142 d46ca5ade0
commit 7aa6d4d433
6 changed files with 65 additions and 27 deletions
Whitespace
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Split View
Diff Options
Show Stats Download Patch File Download Diff File
  1. 39
      configs/nginx/nginx.example
  2. 43
      configs/nginx/nginx_no_https.example
  3. 2
      configs/nginx/snippets/jschan_clearnet_routes.conf
  4. 4
      configs/nginx/snippets/jschan_common_routes.conf
  5. 2
      configs/nginx/snippets/security_headers.conf
  6. 2
      configs/nginx/snippets/security_headers_nocache.conf

39
configs/nginx/nginx.example
Unescape View File

@ -9,7 +9,7 @@ server {
server_tokens off;
add_header Cache-Control "public";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/" always;
add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;
@ -117,7 +117,7 @@ server {
location @backend-private {
#no cache control public
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/" always;
add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;
@ -135,15 +135,8 @@ server {
# authed, no cache pages
location ~* ^/((\w+/manage/.*|globalmanage/(reports|bans|recent|boards|globallogs|news|accounts|settings))|account|create)\.(html|json)$ {
#no cache control public
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/";
add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
expires 0;
root /path/to/jschan/static/html;
try_files $uri @backend-private;
try_files /dev/null @backend-private;
}
# public html
@ -241,7 +234,7 @@ server {
# server_tokens off;
#
# add_header Cache-Control "public";
# add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'";
# add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'" always;
# add_header Referrer-Policy "same-origin" always;
# add_header X-Frame-Options "sameorigin" always;
# add_header X-Content-Type-Options "nosniff" always;
@ -347,6 +340,30 @@ server {
# proxy_set_header Host $host;
# }
#
# location @backend-private {
# #no cache control public
# add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/" always;
# add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
# add_header X-Frame-Options "sameorigin" always;
# add_header X-Content-Type-Options "nosniff" always;
# add_header X-XSS-Protection "1; mode=block" always;
# proxy_buffering off;
# proxy_pass http://chan$request_uri;
# proxy_http_version 1.1;
# proxy_set_header X-Forwarded-Proto http;
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Country-Code 'TOR';
# proxy_set_header Connection '';
# proxy_set_header Host $host;
# }
#
# # authed, no cache pages
# location ~* ^/((\w+/manage/.*|globalmanage/(reports|bans|recent|boards|globallogs|news|accounts|settings))|account|create)\.(html|json)$ {
# expires 0;
# try_files /dev/null @backend-private;
# }
#
# # HTML
# location ~* \.html$ {
# expires 0;

43
configs/nginx/nginx_no_https.example
Unescape View File

@ -9,7 +9,7 @@ server {
server_tokens off;
add_header Cache-Control "public";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' ws://domain.com/";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' ws://domain.com/" always;
add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;
@ -116,6 +116,12 @@ server {
}
location @backend-private {
#no cache control public
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/" always;
add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
proxy_buffering off;
proxy_pass http://chan$request_uri;
proxy_http_version 1.1;
@ -129,15 +135,8 @@ server {
# authed, no cache pages
location ~* ^/((\w+/manage/.*|globalmanage/(reports|bans|recent|boards|globallogs|news|accounts|settings))|account|create)\.(html|json)$ {
#no cache control public
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/";
add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-XSS-Protection "1; mode=block" always;
expires 0;
root /path/to/jschan/static/html;
try_files $uri @backend-private;
try_files /dev/null @backend-private;
}
# public html
@ -238,7 +237,7 @@ server {
# }
#
# add_header Cache-Control "public";
# add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'";
# add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'" always;
# add_header Referrer-Policy "same-origin" always;
# add_header X-Frame-Options "sameorigin" always;
# add_header X-Content-Type-Options "nosniff" always;
@ -318,6 +317,30 @@ server {
# proxy_set_header Host $host;
# }
#
# location @backend-private {
# #no cache control public
# add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/" always;
# add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
# add_header X-Frame-Options "sameorigin" always;
# add_header X-Content-Type-Options "nosniff" always;
# add_header X-XSS-Protection "1; mode=block" always;
# proxy_buffering off;
# proxy_pass http://chan$request_uri;
# proxy_http_version 1.1;
# proxy_set_header X-Forwarded-Proto http;
# proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
# proxy_set_header X-Real-IP $remote_addr;
# proxy_set_header X-Country-Code 'TOR';
# proxy_set_header Connection '';
# proxy_set_header Host $host;
# }
#
# # authed, no cache pages
# location ~* ^/((\w+/manage/.*|globalmanage/(reports|bans|recent|boards|globallogs|news|accounts|settings))|account|create)\.(html|json)$ {
# expires 0;
# try_files /dev/null @backend-private;
# }
#
# # HTML
# location ~* \.html$ {
# expires 0;

2
configs/nginx/snippets/jschan_clearnet_routes.conf
Unescape View File

@ -26,7 +26,7 @@ location @backend {
proxy_set_header Host $host;
}
location @backend {
location @backend-private {
include /etc/nginx/snippets/security_headers_nocache.conf;
proxy_buffering off;
proxy_pass http://chan$request_uri;

4
configs/nginx/snippets/jschan_common_routes.conf
Unescape View File

@ -44,10 +44,8 @@ location /captcha {
# authed, no cache pages
location ~* ^/((\w+/manage/.*|globalmanage/(reports|bans|recent|boards|globallogs|news|accounts|settings))|account|create)\.(html|json)$ {
include /etc/nginx/snippets/security_headers_nocache.conf;
expires 0;
root /path/to/jschan/static/html;
try_files $uri @backend-private;
try_files /dev/null @backend-private;
}
# public html

2
configs/nginx/snippets/security_headers.conf
Unescape View File

@ -1,5 +1,5 @@
add_header Cache-Control "public";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/" always;
add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;

2
configs/nginx/snippets/security_headers_nocache.conf
Unescape View File

@ -1,4 +1,4 @@
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/" always;
add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;

Write Preview
Loading…
Cancel
Save