Set hardening headers for social.ffmuc.net

freifunkMUC · Jul 11, 2023 · fd3715b · fd3715b
1 parent 41de865
commit fd3715b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/nginx/domains/social.ffmuc.net.conf b/nginx/domains/social.ffmuc.net.conf
@@ -113,6 +113,8 @@ server {
   location ~ ^/system/ {
     add_header Cache-Control "public, max-age=2419200, immutable";
     add_header Strict-Transport-Security "max-age=63072000; includeSubDomains";
+    add_header X-Content-Type-Options nosniff;
+    add_header Content-Security-Policy "default-src 'none'; form-action 'none'";
     try_files $uri @proxy;
   }