diff --git a/configs/nginx/nginx.example b/configs/nginx/nginx.example index 21c905df..011acefb 100644 --- a/configs/nginx/nginx.example +++ b/configs/nginx/nginx.example @@ -9,7 +9,7 @@ server { server_tokens off; add_header Cache-Control "public"; - add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://doimain.com"; + add_header Content-Security-Policy "default-src 'self'; img-src 'self' blob:; object-src 'self' blob:; script-src 'self'; style-src 'self' 'unsafe-inline'; frame-src 'self' https://www.youtube.com/embed/ https://www.bitchute.com/embed/; connect-src 'self' wss://domain.com/"; add_header Referrer-Policy "same-origin, strict-origin-when-cross-origin" always; add_header X-Frame-Options "sameorigin" always; add_header X-Content-Type-Options "nosniff" always; diff --git a/configs/nginx/nginx_no_https.example b/configs/nginx/nginx_no_https.example index 7cacc832..8956a9a3 100644 --- a/configs/nginx/nginx_no_https.example +++ b/configs/nginx/nginx_no_https.example @@ -305,7 +305,7 @@ server { # location ~* \.json$ { # expires 0; # root /path/to/jschan/static/json; -# try_files $uri =404; +# try_files $uri @backend; # #json doesnt hit backend if it doesnt exist yet. # } #