add security headers config file

charlesreid1-docker · Jun 26, 2020 · 05dd6ef · 05dd6ef
1 parent e0758ee
commit 05dd6ef
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/conf.d/secheaders.conf b/conf.d/secheaders.conf
@@ -0,0 +1,8 @@
+server_tokens off;
+
+add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
+add_header X-Frame-Options SAMEORIGIN;
+add_header X-Content-Type-Options nosniff;
+add_header X-XSS-Protection "1; mode=block";
+
+client_max_body_size 100m;