From 6c65f62aa3250687b0b4c62351b97a0dd24627f2 Mon Sep 17 00:00:00 2001 From: staticsafe Date: Sun, 8 Apr 2018 18:42:44 -0400 Subject: [PATCH] remove quotes around referrer-policy and add HSTS back in --- ubuntu/mastodon.zombocloud.com.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/ubuntu/mastodon.zombocloud.com.yml b/ubuntu/mastodon.zombocloud.com.yml index be48046..e17f679 100644 --- a/ubuntu/mastodon.zombocloud.com.yml +++ b/ubuntu/mastodon.zombocloud.com.yml @@ -26,6 +26,7 @@ - ssl_certificate "/etc/ssl/letsencrypt/mastodon.zombocloud.com.crt" - ssl_certificate_key "/etc/ssl/letsencrypt/mastodon.zombocloud.com.pem" - add_header Referrer-Policy no-referrer, strict-origin-when-cross-origin + - add_header Strict-Transport-Security max-age=31536000 - location / { try_files $uri @proxy; } @@ -49,7 +50,8 @@ proxy_cache_valid 200 7d; proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504; add_header X-Cached $upstream_cache_status; - add_header Referrer-Policy "no-referrer, strict-origin-when-cross-origin"; + add_header Strict-Transport-Security max-age=31536000; + add_header Referrer-Policy no-referrer, strict-origin-when-cross-origin; tcp_nodelay on; } - location /api/v1/streaming {