remove add_header

This commit is contained in:
staticsafe 2021-09-07 17:24:04 -04:00
parent 0cdad6a443
commit 3a88e45cbc
1 changed files with 0 additions and 4 deletions

View File

@ -24,10 +24,6 @@
- ssl_stapling on
- resolver [::1] valid=300s
- add_header Strict-Transport-Security max-age=31536000
- add_header Content-Security-Policy "default-src 'none'; script-src 'self' 'unsafe-inline'; img-src 'self'; style-src 'self' 'unsafe-inline'; font-src 'self'; object-src 'none'; media-src 'self' blob:; worker-src 'self' blob:; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; connect-src 'self' https://*.twimg.com; manifest-src 'self'";
- add_header X-Content-Type-Options nosniff;
- add_header X-Frame-Options DENY;
- add_header X-XSS-Protection "1; mode=block"
- location / {
proxy_pass http://127.0.0.1:8080;
}