Set HTTP security headers.

See https://securityheaders.io .

1 files changed, 2 insertions, 0 deletions

diff --git a/roles/munin-master/files/etc/nginx/sites-available/munin b/roles/munin-master/files/etc/nginx/sites-available/munin
index d1cbda0..7b0b789 100644
--- a/roles/munin-master/files/etc/nginx/sites-available/munin
+++ b/roles/munin-master/files/etc/nginx/sites-available/munin
@@ -1,33 +1,35 @@
 server {
     listen 127.0.0.1:80;
     listen [::1]:80;
 
     server_name munin.fripost.org;
 
     allow 127.0.0.0/8;
     allow ::1/128;
     deny all;
 
     access_log /var/log/nginx/munin.access.log;
     error_log  /var/log/nginx/munin.error.log info;
 
+    include snippets/headers.conf;
+
     location = / {
         return 302 /munin$args;
     }
 
     location /munin/static/ {
         alias /etc/munin/static/;
     }
 
     location /munin-cgi/munin-cgi-graph/ {
         fastcgi_split_path_info ^(/munin-cgi/munin-cgi-graph)(.*);
         include snippets/fastcgi.conf;
         fastcgi_pass unix:/run/munin/cgi-graph.socket;
         gzip off;
     }
 
     location /munin/ {
         fastcgi_split_path_info ^(/munin)(.*);
         include snippets/fastcgi.conf;
         fastcgi_pass unix:/run/munin/cgi-html.socket;
         gzip off;