colin
/
resume
1
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update docker/resume/nginx.conf
ci/woodpecker/push/woodpecker Pipeline was successful Details

This commit is contained in:
colin 2024-11-11 21:47:08 -05:00
parent a6ed1611f3
commit 0a3fcede7e
1 changed files with 11 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docker/resume/nginx.conf
View File

@ -12,9 +12,18 @@ server {
add_header Referrer-Policy "strict-origin-when-cross-origin" always;
add_header Permissions-Policy "camera=(), microphone=(), geolocation=(), accelerometer=(), gyroscope=(), magnetometer=(), payment=(), usb=()" always;
# Additional headers (example CSP with nonce for inline content if needed)
# Set up CSP with adjusted sources and nonce
set $nonce $request_id;
add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'nonce-$nonce' https://matomo.nixc.us; style-src 'self' 'nonce-$nonce' https://colinknapp.com; img-src 'self' https://matomo.nixc.us https://colinknapp.com; frame-ancestors 'self'; base-uri 'self'; form-action 'self';";
add_header Content-Security-Policy "
default-src 'none';
script-src 'self' 'nonce-$nonce' https://matomo.nixc.us;
style-src 'self' 'nonce-$nonce' https://colinknapp.com;
img-src 'self' https://matomo.nixc.us https://colinknapp.com;
connect-src 'self' https://matomo.nixc.us;
frame-ancestors 'self';
base-uri 'self';
form-action 'self';
";
# Basic location block
location / {