From 4f2af19a796a291a5a6efc1fb90a94b854749429 Mon Sep 17 00:00:00 2001 From: Philip Forsberg Date: Thu, 14 Nov 2024 14:29:43 +0100 Subject: [PATCH] fix: nginx --- .docker/resources/nginx.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.docker/resources/nginx.conf b/.docker/resources/nginx.conf index 4cf0551a..f8a7410e 100644 --- a/.docker/resources/nginx.conf +++ b/.docker/resources/nginx.conf @@ -19,7 +19,7 @@ http { server_tokens off; # https://scotthelme.co.uk/hardening-your-http-response-headers - add_header Content-Security-Policy "default-src 'self'; img-src 'self' data: https://www.diamonds.etimo.se https://diamonds.etimo.se;" + add_header Content-Security-Policy "default-src 'self'; img-src 'self' data: https://www.diamonds.etimo.se https://diamonds.etimo.se;" always; add_header Strict-Transport-Security "max-age=31536000; includeSubdomains" always; add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Xss-Protection "1; mode=block" always;