From 4c16f30094e8761446eabd1ff548235ebad0ee51 Mon Sep 17 00:00:00 2001
From: Marc Beninca <marc-beninca@rwx.work>
Date: Thu, 15 Aug 2019 13:13:37 +0200
Subject: [PATCH] server/nosniff

---
 in/personal/server/index.rst | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/in/personal/server/index.rst b/in/personal/server/index.rst
index ad73f14..313495d 100644
--- a/in/personal/server/index.rst
+++ b/in/personal/server/index.rst
@@ -407,11 +407,11 @@ Security
  listen [::]:443 ssl http2;
  add_header Expect-CT "enforce,max-age=0" always;
  add_header Strict-Transport-Security "max-age=31557600;includeSubDomains;preload" always;
+ add_header X-Content-Type-Options "nosniff" always;
  add_header X-Frame-Options "DENY" always;
 
  add_header Content-Security-Policy "default-src 'self'" always;
  add_header Referrer-Policy "no-referrer-when-downgrade" always;
- add_header X-Content-Type-Options "nosniff" always;
  set $fp "";
  set $fp "${fp} camera 'none';";
  set $fp "${fp} microphone 'none';";