roles/common-web/files/etc/nginx/snippets/headers.conf


1
2
3
4
5

# https://securityheaders.io/
add_header Referrer-Policy no-referrer;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";