summaryrefslogtreecommitdiffstats
path: root/roles/common-web/files/etc/nginx/snippets/headers.conf
diff options
context:
space:
mode:
Diffstat (limited to 'roles/common-web/files/etc/nginx/snippets/headers.conf')
-rw-r--r--roles/common-web/files/etc/nginx/snippets/headers.conf4
1 files changed, 4 insertions, 0 deletions
diff --git a/roles/common-web/files/etc/nginx/snippets/headers.conf b/roles/common-web/files/etc/nginx/snippets/headers.conf
new file mode 100644
index 0000000..60e5ace
--- /dev/null
+++ b/roles/common-web/files/etc/nginx/snippets/headers.conf
@@ -0,0 +1,4 @@
+# https://securityheaders.io/
+add_header X-Frame-Options "SAMEORIGIN";
+add_header X-Content-Type-Options nosniff;
+add_header X-XSS-Protection "1; mode=block";