nixaalborg/nixos
2
0
Fork 0
Code Issues Pull requests Releases Wiki Activity

Add Onion-Location header

Browse source
This commit is contained in:
Emelie Graven 2021-11-26 14:51:00 +01:00
parent 10539c295b
commit df554c6048
Signed by: emelie
GPG key ID: C11123726DBB55A1
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
config/hosts/capetillo/services/nginx.nix
View file

@ -6,6 +6,14 @@
enableACME = true; enableACME = true;
forceSSL = true; forceSSL = true;
root = "/var/www/nixaalb.org/public"; root = "/var/www/nixaalb.org/public";
extraConfig = ''
add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always;
add_header 'Referrer-Policy' 'same-origin';
add_header X-Frame-Options DENY;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header Onion-Location http://http://ag6mlqzpyswq3oogpnuykgllnv5gevjew6dshzmotwgnpo5jw2jqltad.onion$request_uri;
'';
}; };
"mta-sts.nixaalb.org" = { "mta-sts.nixaalb.org" = {
enableACME = true; enableACME = true;
@ -19,11 +27,9 @@
port = 8080; port = 8080;
} ]; } ];
root = "/var/www/nixaalb.org/public"; root = "/var/www/nixaalb.org/public";
}; };
}; };
systemd.services.nginx.serviceConfig = {
PrivateTmp = lib.mkForce "false";
};
} }