Inferencium/cfg
1
0
Fork 0
Code Issues Activity

add(nginx): No-CSP security-header file

Browse Source 
Content Security Policy breaks some features of Gitea and should be
disabled. This header file allows other configuration files to use it,
too.
This commit is contained in:
inference 2025-06-29 17:55:35 +00:00
parent 081d7e0467
commit 61965a5c79
Signed by: inference
SSH Key Fingerprint: SHA256:/O3c09/4f1lh4zrhFs2qvQEDda6dZbTwG9xEcj8OfWo
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
xb-00-01/nginx/include/header-security-nocsp.conf Normal file
View File

@ -0,0 +1,13 @@
# Inferencium - xb-00-01
# Nginx - Configuration - Header - Security - No CSP
# Version: 1.0.0-beta.1
# Copyright 2025 Jake Winters
# SPDX-License-Identifier: BSD-3-Clause
add_header Strict-Transport-Security "max-age=126200000; includeSubDomains; preload";
add_header X-Frame-Options "DENY";
add_header X-Content-Type-Options nosniff;
add_header Referrer-Policy no-referrer;