diff --git a/nginx/snippets/headers.conf b/nginx/snippets/headers.conf new file mode 100644 index 0000000..1896e36 --- /dev/null +++ b/nginx/snippets/headers.conf @@ -0,0 +1,6 @@ +add_header Referrer-Policy 'no-referrer'; +add_header X-Content-Type-Options "nosniff" always; +add_header X-Frame-Options SAMEORIGIN always; +add_header X-XSS-Protection "1; mode=block" always; +add_header Content-Security-Policy "upgrade-insecure-requests"; + diff --git a/nginx/snippets/security.conf b/nginx/snippets/security.conf deleted file mode 100644 index df772a8..0000000 --- a/nginx/snippets/security.conf +++ /dev/null @@ -1,14 +0,0 @@ - - -add_header Strict-Transport-Security 'max-age=31536000'; - -proxy_hide_header X-XSS-Protection; -proxy_hide_header X-Powered-By; - -add_header X-Frame-Options 'SAMEORIGIN'; -add_header X-Content-Type-Options 'nosniff'; -add_header X-Permitted-Cross-Domain-Policies 'none'; -add_header X-XSS-Protection '1; mode=block'; -add_header Referrer-Policy 'same-origin'; -add_header Content-Security-Policy "upgrade-insecure-requests" always; -add_header Feature-policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'self';focus-without-user-activation 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';sync-xhr 'none';usb '*';vr 'none'";