This commit is contained in:
zino
2023-12-05 16:01:58 +01:00
parent 128b0a0162
commit 4b6629e280
2 changed files with 10 additions and 10 deletions

View File

@@ -10,13 +10,13 @@ server {
ssl_certificate_key /etc/letsencrypt/live/code.zinomedia.de/privkey.pem;
# SSL Optimizations
#ssl_protocols TLSv1.2 TLSv1.3;
#ssl_session_cache shared:SSL:10m;
#ssl_session_timeout 10m;
#ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2 TLSv1.3;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_prefer_server_ciphers on;
#add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
#add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:;" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:;" always;
# Vouch
# send all requests to the `/validate` endpoint for authorization