diff options
Diffstat (limited to 'roles/common-web/files/etc/nginx/snippets/headers.conf')
| -rw-r--r-- | roles/common-web/files/etc/nginx/snippets/headers.conf | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/roles/common-web/files/etc/nginx/snippets/headers.conf b/roles/common-web/files/etc/nginx/snippets/headers.conf new file mode 100644 index 0000000..798a151 --- /dev/null +++ b/roles/common-web/files/etc/nginx/snippets/headers.conf @@ -0,0 +1,5 @@ +# https://securityheaders.io/ +add_header Referrer-Policy no-referrer; +add_header X-Frame-Options "SAMEORIGIN"; +add_header X-Content-Type-Options nosniff; +add_header X-XSS-Protection "1; mode=block"; |