From 2a86a900a09a1711b125c0b6b5f67106024b5e45 Mon Sep 17 00:00:00 2001
From: Jimmy Monin <jimmy@monin.net>
Date: Sun, 25 Nov 2018 22:10:06 +0100
Subject: [PATCH] Upgrade nginx configuration following release 14
 recommendations
 (https://docs.nextcloud.com/server/14/admin_manual/installation/nginx.html)

---
 conf/nginx.conf | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/conf/nginx.conf b/conf/nginx.conf
index 3eee860..1691095 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -19,6 +19,7 @@ location ^~ __PATH__ {
   add_header X-Robots-Tag none;
   add_header X-Download-Options noopen;
   add_header X-Permitted-Cross-Domain-Policies none;
+  add_header Referrer-Policy no-referrer;
 
   # Set max upload size
   client_max_body_size 10G;
@@ -85,6 +86,8 @@ location ^~ __PATH__ {
     add_header X-Robots-Tag none;
     add_header X-Download-Options noopen;
     add_header X-Permitted-Cross-Domain-Policies none;
+    add_header Referrer-Policy no-referrer;
+
     # Optional: Don't log access to assets
     access_log off;
   }