mirror of
https://github.com/YunoHost-Apps/spip_ynh.git
synced 2024-09-03 20:25:59 +02:00
nginx: more_set_headers and not more_set_header
This commit is contained in:
parent
ea91589ae9
commit
ff9333a386
1 changed files with 9 additions and 10 deletions
|
@ -4,10 +4,9 @@ location __PATH__/ {
|
||||||
# Path to source
|
# Path to source
|
||||||
alias __FINALPATH__/ ;
|
alias __FINALPATH__/ ;
|
||||||
|
|
||||||
|
|
||||||
# Force usage of https
|
# Force usage of https
|
||||||
if ($scheme = http) {
|
if ($scheme = http) {
|
||||||
rewrite ^ https://$server_name$request_uri? permanent;
|
rewrite ^ https://$server_name$request_uri? permanent;
|
||||||
}
|
}
|
||||||
|
|
||||||
index index.php;
|
index index.php;
|
||||||
|
@ -24,13 +23,13 @@ location __PATH__/ {
|
||||||
}
|
}
|
||||||
|
|
||||||
# Add headers to serve security related headers
|
# Add headers to serve security related headers
|
||||||
more_set_header Strict-Transport-Security "max-age=15768000;";
|
more_set_headers Strict-Transport-Security "max-age=15768000;";
|
||||||
more_set_header X-Content-Type-Options nosniff;
|
more_set_headers X-Content-Type-Options nosniff;
|
||||||
more_set_header X-Frame-Options "SAMEORIGIN";
|
more_set_headers X-Frame-Options "SAMEORIGIN";
|
||||||
more_set_header X-XSS-Protection "1; mode=block";
|
more_set_headers X-XSS-Protection "1; mode=block";
|
||||||
more_set_header X-Robots-Tag none;
|
more_set_headers X-Robots-Tag none;
|
||||||
more_set_header X-Download-Options noopen;
|
more_set_headers X-Download-Options noopen;
|
||||||
more_set_header X-Permitted-Cross-Domain-Policies none;
|
more_set_headers X-Permitted-Cross-Domain-Policies none;
|
||||||
|
|
||||||
location ~^/(tmp|config|\.ht)/{
|
location ~^/(tmp|config|\.ht)/{
|
||||||
deny all;
|
deny all;
|
||||||
|
@ -42,7 +41,7 @@ location __PATH__/ {
|
||||||
# cacher.
|
# cacher.
|
||||||
rewrite ^/([^/]*)/favicon\.ico$ __PATH__/spip.php?page=favicon.ico last;
|
rewrite ^/([^/]*)/favicon\.ico$ __PATH__/spip.php?page=favicon.ico last;
|
||||||
expires 1w;
|
expires 1w;
|
||||||
more_set_header Cache-Control public;
|
more_set_headers Cache-Control public;
|
||||||
}
|
}
|
||||||
|
|
||||||
location ~ [^/]\.php(/|$) {
|
location ~ [^/]\.php(/|$) {
|
||||||
|
|
Loading…
Reference in a new issue