ops/nginx-kit
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

update

Browse source
This commit is contained in:
Dallas Lu 2026-06-05 14:04:17 +08:00
parent a16316979c
commit a2929be104
No known key found for this signature in database
6 changed files with 43 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

15
security.conf
View file

@ -1,15 +1,12 @@
server_tokens off;
## Don't show the nginx version number, a security best practice
add_header Referrer-Policy origin-when-cross-origin always;
add_header X-Frame-Options SAMEORIGIN;
add_header X-Content-Type-Options nosniff;
#add_header X-XSS-Protection "1; mode=block" always;
add_header X-XSS-Protection "0";
server_tokens off;
#more_clear_headers 'X-Powered-By';
add_header Referrer-Policy strict-origin-when-cross-origin always;
add_header X-Frame-Options SAMEORIGIN always;
add_header X-Content-Type-Options nosniff always;
add_header X-XSS-Protection "0" always;
# Redirect `example.com.` to `example.com`
if ($http_host ~ "\.$" ){
rewrite ^(.*) $scheme://$host$1 permanent;
}
}