From ac453e1432ad734543bb8bc5b89aac861d87a2fe Mon Sep 17 00:00:00 2001
From: Edwin Lyon <53972157+practical-engelbart@users.noreply.github.com>
Date: Fri, 18 Sep 2020 00:42:11 -0700
Subject: [PATCH] Create mailcow.conf

---
 nginx/snippets/mailcow.conf | 7 +++++++
 1 file changed, 7 insertions(+)
 create mode 100644 nginx/snippets/mailcow.conf

diff --git a/nginx/snippets/mailcow.conf b/nginx/snippets/mailcow.conf
new file mode 100644
index 0000000..7d160de
--- /dev/null
+++ b/nginx/snippets/mailcow.conf
@@ -0,0 +1,7 @@
+add_header Strict-Transport-Security "max-age=15768000";
+add_header X-Frame-Options SAMEORIGIN;
+add_header X-Content-Type-Options nosniff;
+add_header X-XSS-Protection "1; mode=block";
+add_header Referrer-Policy "strict-origin";
+add_header Content-Security-Policy "upgrade-insecure-requests";
+add_header Feature-policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'self';focus-without-user-activation 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';sync-xhr 'none';usb '*';vr 'none'";