summaryrefslogtreecommitdiff
path: root/nginx/snippets
diff options
context:
space:
mode:
authorDaniel Micay <daniel.micay@grapheneos.org>2023-07-26 12:12:29 -0400
committerDaniel Micay <daniel.micay@grapheneos.org>2025-06-20 20:05:11 -0400
commit1c70723a135db8cf52ff614ef5a4ac1bbb577d31 (patch)
tree878c318cfca949e93942f57abf3811a603fd9145 /nginx/snippets
parentdd97da343a52198a7cc1d591a0ad04e44142451b (diff)
stagingstaging
Diffstat (limited to 'nginx/snippets')
-rw-r--r--nginx/snippets/security-headers-base.conf3
1 files changed, 3 insertions, 0 deletions
diff --git a/nginx/snippets/security-headers-base.conf b/nginx/snippets/security-headers-base.conf
index aa13ee38..7badb403 100644
--- a/nginx/snippets/security-headers-base.conf
+++ b/nginx/snippets/security-headers-base.conf
@@ -1,3 +1,6 @@
+# staging site (not a security header)
+add_header X-Robots-Tag "noindex" always;
+
add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer" always;