server/nginx/expect-ct

This commit is contained in:
Marc Beninca 2019-08-08 15:27:01 +02:00
parent 590702520b
commit 719a6f6d58

View file

@ -391,7 +391,8 @@ Security
listen 443 ssl http2; listen 443 ssl http2;
listen [::]:443 ssl http2; listen [::]:443 ssl http2;
add_header Content-Security-Policy "default-src 'self'"; add_header Content-Security-Policy "default-src 'self'" always;
add_header Expect-CT "max-age=0, enforce" always;
add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload" always; add_header Strict-Transport-Security "max-age=31557600; includeSubDomains; preload" always;
add_header X-Content-Type-Options "nosniff" always; add_header X-Content-Type-Options "nosniff" always;
add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Frame-Options "SAMEORIGIN" always;