server/nginx/csp,sts

This commit is contained in:
Marc Beninca 2019-08-06 23:13:29 +02:00
parent 87467943d8
commit 5c1c80668b

View file

@ -388,7 +388,8 @@ Security
listen 443 ssl http2;
listen [::]:443 ssl http2;
add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload";
add_header Content-Security-Policy "default-src 'self'";
add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload" always;
Sites
^^^^^