server/nginx/expect-ct
This commit is contained in:
parent
590702520b
commit
719a6f6d58
1 changed files with 2 additions and 1 deletions
|
@ -391,7 +391,8 @@ Security
|
||||||
|
|
||||||
listen 443 ssl http2;
|
listen 443 ssl http2;
|
||||||
listen [::]:443 ssl http2;
|
listen [::]:443 ssl http2;
|
||||||
add_header Content-Security-Policy "default-src 'self'";
|
add_header Content-Security-Policy "default-src 'self'" always;
|
||||||
|
add_header Expect-CT "max-age=0, enforce" always;
|
||||||
add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload" always;
|
add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload" always;
|
||||||
add_header X-Content-Type-Options "nosniff" always;
|
add_header X-Content-Type-Options "nosniff" always;
|
||||||
add_header X-Frame-Options "SAMEORIGIN" always;
|
add_header X-Frame-Options "SAMEORIGIN" always;
|
||||||
|
|
Loading…
Reference in a new issue