diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-06-27 20:31:45 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-06-27 20:33:25 +0900 |
| commit | 42c21ad90626346277861471b1d6896a4e2e5058 (patch) | |
| tree | 3e356fdd3606f27ccd37310e9f9f181acc4ee235 /nginx/snippets/security-headers-base.conf | |
| parent | f16ef88f9f25e1e09a2a741ba3ba4bf44b03b927 (diff) | |
treewide: build via nix
Diffstat (limited to 'nginx/snippets/security-headers-base.conf')
| -rw-r--r-- | nginx/snippets/security-headers-base.conf | 12 |
1 files changed, 0 insertions, 12 deletions
diff --git a/nginx/snippets/security-headers-base.conf b/nginx/snippets/security-headers-base.conf deleted file mode 100644 index aa13ee38..00000000 --- a/nginx/snippets/security-headers-base.conf +++ /dev/null @@ -1,12 +0,0 @@ -add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always; -add_header X-Content-Type-Options "nosniff" always; -add_header Referrer-Policy "no-referrer" always; -add_header Cross-Origin-Opener-Policy "same-origin" always; -add_header Cross-Origin-Embedder-Policy "require-corp" always; -add_header Origin-Agent-Cluster "?1" always; - -# obsolete and replaced with Content-Security-Policy frame-ancestors 'none' -add_header X-Frame-Options "DENY" always; - -# obsolete, unsafe and replaced with strong Content-Security-Policy -add_header X-XSS-Protection "0" always; |