msfjarvis
/
msfjarvis.dev
mirror of https://github.com/msfjarvis/msfjarvis.dev.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Caddyfile: sync from server-config 

Signed-off-by: Harsh Shandilya <me@msfjarvis.dev>
This commit is contained in:
Harsh Shandilya 2020-06-24 20:35:05 +05:30
parent 513cdc25d3
commit ce15cd5f70
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
Caddyfile
View File

@ -5,23 +5,23 @@
(base_config) {
header / {
Content-Security-Policy "
base-uri 'none';
base-uri 'self';
connect-src 'self' commento.msfjarvis.dev;
default-src 'none';
default-src 'self';
frame-ancestors 'none';
form-action 'self';
font-src 'self' data: fonts.gstatic.com commento.msfjarvis.dev;
img-src data: 'self' gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev;
object-src: 'none';
script-src 'self' commento.msfjarvis.dev;
style-src 'self' fonts.googleapis.com commento.msfjarvis.dev;
frame-src https://github.com;
font-src 'self' data: commento.msfjarvis.dev stackpath.bootstrapcdn.com;
img-src 'self' data: gfycat.com imgur.com *.imgur.com commento.msfjarvis.dev *.amazonaws.com;
object-src 'none';
script-src 'self' commento.msfjarvis.dev 'unsafe-inline';
style-src 'self' commento.msfjarvis.dev stackpath.bootstrapcdn.com 'unsafe-inline';
"
# Security related changes stolen from https://github.com/searx/searx-docker/blob/master/Caddyfile
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
X-XSS-Protection "1; mode=block"
X-Content-Type-Options "nosniff"
X-Frame-Options "SAMEORIGIN"
Feature-Policy "accelerometer 'none';ambient-light-sensor 'none'; autoplay 'none';camera 'none';encrypted-media 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none'; speaker 'none';sync-xhr 'none';usb 'none';vr 'none'"
Feature-Policy "accelerometer 'none'; autoplay 'none';camera 'none';encrypted-media 'none'; geolocation 'none';gyroscope 'none';magnetometer 'none';microphone 'none';midi 'none';payment 'none';picture-in-picture 'none';sync-xhr 'none';usb 'none'"
Referrer-Policy "no-referrer"
}
}