Content Security Policy breaks some features of Gitea and should be disabled. This header file allows other configuration files to use it, too.
14 lines
387 B
Plaintext
14 lines
387 B
Plaintext
# Inferencium - xb-00-01
|
|
# Nginx - Configuration - Header - Security - No CSP
|
|
# Version: 1.0.0-beta.1
|
|
|
|
# Copyright 2025 Jake Winters
|
|
# SPDX-License-Identifier: BSD-3-Clause
|
|
|
|
|
|
add_header Strict-Transport-Security "max-age=126200000; includeSubDomains; preload";
|
|
add_header X-Frame-Options "DENY";
|
|
add_header X-Content-Type-Options nosniff;
|
|
add_header Referrer-Policy no-referrer;
|
|
|