merge-requests/218/head
Thomas Lynch 3 years ago
parent a50301f8e4
commit 9c8e842913
  1. 2
      configs/nginx/nginx.example
  2. 2
      configs/nginx/nginx_no_https.example

@ -9,7 +9,7 @@ server {
server_tokens off;
add_header Cache-Control "public";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://doimain.com";
add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/";
add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always;
add_header X-Frame-Options "sameorigin" always;
add_header X-Content-Type-Options "nosniff" always;

@ -305,7 +305,7 @@ server {
# location ~* \.json$ {
# expires 0;
# root /path/to/jschan/static/json;
# try_files $uri =404;
# try_files $uri @backend;
# #json doesnt hit backend if it doesnt exist yet.
# }
#

Loading…
Cancel
Save