8987ff9c6d
Signed-off-by: Zoey <zoey@z0ey.de> - dep updates - upodate nginx/certbot - improve headers - change NPM to NPMplus in launch.sh - when using https backend, only TLSv1 to TLSv1.3 is now allowed, whith secure ciphers
7 lines
No EOL
372 B
Text
7 lines
No EOL
372 B
Text
more_set_headers "X-XSS-Protection: 0";
|
|
more_set_headers "X-Frame-Options: SAMEORIGIN";
|
|
more_set_headers "X-Content-Type-Options: nosniff";
|
|
more_set_headers "Referrer-Policy: strict-origin-when-cross-origin";
|
|
more_set_headers "Content-Security-Policy: upgrade-insecure-requests";
|
|
|
|
more_set_headers "Strict-Transport-Security: max-age=31536000; includeSubDomains; preload"; |