YunoHost-Apps/cryptpad_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/cryptpad_ynh.git synced 2024-09-03 18:26:14 +02:00
Code Issues Activity Actions

Update nginx.conf

Browse source
This commit is contained in:
Éric Gaspar 2023-12-21 13:01:37 +01:00
parent 0a8265a7bf
commit 821f80b79e
1 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
conf/nginx.conf
View file

@ -5,11 +5,11 @@ set $api_domain "__DOMAIN__";
set $files_domain "__DOMAIN__"; set $files_domain "__DOMAIN__";
ssl_ecdh_curve secp384r1; ssl_ecdh_curve secp384r1;
add_header "X-XSS-Protection: '1; mode=block'"; more_set_headers "X-XSS-Protection: 1; mode=block";
add_header "X-Content-Type-Options: nosniff"; more_set_headers "X-Content-Type-Options: nosniff";
add_header "Access-Control-Allow-Origin: '${allowed_origins}'"; more_set_headers "Access-Control-Allow-Origin: ${allowed_origins}";
add_header "Access-Control-Allow-Credentials: true; more_set_headers "Access-Control-Allow-Credentials: true";
# add_header "X-Frame-Options: 'SAMEORIGIN'"; # more_set_headers "X-Frame-Options: SAMEORIGIN";
# Enable SharedArrayBuffer in Firefox (for .xlsx export) # Enable SharedArrayBuffer in Firefox (for .xlsx export)
more_set_headers "Cross-Origin-Resource-Policy: cross-origin"; more_set_headers "Cross-Origin-Resource-Policy: cross-origin";