Skip to content

Commit

Permalink
Missing signed-off-statement
Browse files Browse the repository at this point in the history
Signed-off-by: seikexyz <github@seike.xyz>

Signed-off-by: Stefan <131039334+seikexyz@users.noreply.github.com>
Signed-off-by: seikexyz <github@seike.xyz>
  • Loading branch information
seikexyz committed Apr 26, 2023
1 parent 91312fb commit 3ee8429
Showing 1 changed file with 7 additions and 7 deletions.
14 changes: 7 additions & 7 deletions roles/install_nextcloud/templates/nginx_nc.j2
Original file line number Diff line number Diff line change
Expand Up @@ -98,13 +98,13 @@ server {
# pagespeed off;

# HTTP response headers borrowed from Nextcloud `.htaccess`
add_header Referrer-Policy "no-referrer" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Download-Options "noopen" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "noindex, nofollow" always;
add_header X-XSS-Protection "1; mode=block" always;
add_header Referrer-Policy "no-referrer" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Download-Options "noopen" always;
add_header X-Frame-Options "SAMEORIGIN" always;
add_header X-Permitted-Cross-Domain-Policies "none" always;
add_header X-Robots-Tag "noindex, nofollow" always;
add_header X-XSS-Protection "1; mode=block" always;

# Remove X-Powered-By, which is an information leak
fastcgi_hide_header X-Powered-By;
Expand Down

0 comments on commit 3ee8429

Please sign in to comment.