From e088f14f33c9e428818a9a53bb85309674441e10 Mon Sep 17 00:00:00 2001
From: August Andersen <aha@iterator-it.dk>
Date: Mon, 5 May 2025 11:56:00 +0200
Subject: [PATCH] added httpheaders

---
 .nginx/nginx.conf | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.nginx/nginx.conf b/.nginx/nginx.conf
index 4bbb4b49f..3fd8a3bfb 100644
--- a/.nginx/nginx.conf
+++ b/.nginx/nginx.conf
@@ -5,6 +5,9 @@ server {
     index index.html;
 
     location / {
+        # Security header
+        add_header Referrer-Policy "no-referrer-when-downgrade";
+        add_header X-Frame-Options "DENY" always;
         #if ($request_method = 'OPTIONS') {
         #    add_header 'Access-Control-Allow-Origin' '*' always;
         #    add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
@@ -34,4 +37,4 @@ server {
         #}
         try_files $uri $uri/ /index.html;
     }
-}
\ No newline at end of file
+}