colin
/
resume
1
0
Fork 1
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Update docker/resume/nginx.conf
ci/woodpecker/push/woodpecker Pipeline was successful Details

This commit is contained in:
colin 2024-11-11 10:12:43 -05:00
parent 18f5065b42
commit 7eca9fc876
1 changed files with 10 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docker/resume/nginx.conf
View File

@ -3,8 +3,16 @@ server {
root /usr/share/nginx/html;
index resume.html;
# Allow only self and matomo.nixc.us for tracking assets
add_header Content-Security-Policy "default-src 'self'; script-src 'self' https://matomo.nixc.us; img-src 'self' https://matomo.nixc.us; style-src 'self' 'unsafe-inline';";
# Enhanced Content-Security-Policy
add_header Content-Security-Policy "
default-src 'none';
script-src 'self' https://matomo.nixc.us;
style-src 'self'; # Removed 'unsafe-inline' if possible by moving inline styles to external
img-src 'self' https://matomo.nixc.us;
frame-ancestors 'self';
base-uri 'self';
form-action 'self';
";
# Security Headers
add_header X-Frame-Options "SAMEORIGIN" always;
@ -18,7 +26,6 @@ server {
add_header Cross-Origin-Resource-Policy "same-origin" always;
add_header Cross-Origin-Opener-Policy "same-origin" always;
# Additional settings if needed for Matomo tracking
location / {
try_files $uri $uri/ =404;
}