facil/civicrm#21191: tpl/custom-nginx-server.tpl.php: add support for…

… HSTS, XSS and CSP headers.
coopsymbiotic · Mar 3, 2018 · 9a04058d494c929ece2a50be4cedb1a2091b75f7 · 9a04058
1 parent 0c6b16c
commit 9a04058d494c929ece2a50be4cedb1a2091b75f7
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/tpl/custom-nginx-server.tpl.php b/tpl/custom-nginx-server.tpl.php
@@ -189,6 +189,24 @@
 ###  nginx default maps
 #######################################################
 
+##
+## Custom SymbioTIC variables that can be overriden in nginx-custom.conf
+## c.f. facil/civicrm#21191
+##
+
+map $https $symbiotic_hsts {
+  on 'max-age=15768000';
+  default '';
+}
+
+map $https $symbiotic_xss_protection {
+  default '';
+}
+
+map $https $symbiotic_security_policy {
+  default '';
+}
+
 ###
 ### Support separate Speed Booster caches for various mobile devices.
 ###