forked from colin/resume
Update docker/resume/nginx.conf
This commit is contained in:
parent
a6ed1611f3
commit
0a3fcede7e
|
@ -12,9 +12,18 @@ server {
|
||||||
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
|
||||||
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), accelerometer=(), gyroscope=(), magnetometer=(), payment=(), usb=()" always;
|
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), accelerometer=(), gyroscope=(), magnetometer=(), payment=(), usb=()" always;
|
||||||
|
|
||||||
# Additional headers (example CSP with nonce for inline content if needed)
|
# Set up CSP with adjusted sources and nonce
|
||||||
set $nonce $request_id;
|
set $nonce $request_id;
|
||||||
add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'nonce-$nonce' https://matomo.nixc.us; style-src 'self' 'nonce-$nonce' https://colinknapp.com; img-src 'self' https://matomo.nixc.us https://colinknapp.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self';";
|
add_header Content-Security-Policy "
|
||||||
|
default-src 'none';
|
||||||
|
script-src 'self' 'nonce-$nonce' https://matomo.nixc.us;
|
||||||
|
style-src 'self' 'nonce-$nonce' https://colinknapp.com;
|
||||||
|
img-src 'self' https://matomo.nixc.us https://colinknapp.com;
|
||||||
|
connect-src 'self' https://matomo.nixc.us;
|
||||||
|
frame-ancestors 'self';
|
||||||
|
base-uri 'self';
|
||||||
|
form-action 'self';
|
||||||
|
";
|
||||||
|
|
||||||
# Basic location block
|
# Basic location block
|
||||||
location / {
|
location / {
|
||||||
|
|
Loading…
Reference in New Issue