This commit is contained in:
zino
2023-12-05 15:12:53 +01:00
parent 058e9cdd2a
commit e6786b4e56
2 changed files with 10 additions and 10 deletions

View File

@@ -10,12 +10,12 @@ server {
ssl_certificate_key /etc/letsencrypt/live/code.zinomedia.de/privkey.pem;
# SSL Optimizations
ssl_protocols TLSv1.2 TLSv1.3;
ssl_session_cache shared:SSL:10m;
ssl_session_timeout 10m;
ssl_prefer_server_ciphers on;
#ssl_protocols TLSv1.2 TLSv1.3;
#ssl_session_cache shared:SSL:10m;
#ssl_session_timeout 10m;
#ssl_prefer_server_ciphers on;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
#add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self' data:;" always;
# Vouch
@@ -57,7 +57,7 @@ server {
#proxy_pass $upstream;
# redirect to Vouch Proxy for login
return 302 https://vouch.armos.zinomedia.de:9090/login?url=$scheme://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err;
return 302 https://vouch.armos.zinomedia.de/login?url=$scheme://$http_host$request_uri&vouch-failcount=$auth_resp_failcount&X-Vouch-Token=$auth_resp_jwt&error=$auth_resp_err;
}