diff --git a/roles/apps/templates/caddy/Caddyfile.j2 b/roles/apps/templates/caddy/Caddyfile.j2 index 7b55d33..acf35eb 100644 --- a/roles/apps/templates/caddy/Caddyfile.j2 +++ b/roles/apps/templates/caddy/Caddyfile.j2 @@ -1,6 +1,7 @@ {# code: language=ansible-jinja #} # THIS FILE IS MANAGED BY ANSIBLE +{% if 'searxng' in apps_include %} {{ apps_vars.searxng.domain }} { tls {{ tls_email }} @@ -32,8 +33,7 @@ } header { - Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" - X-XSS-Protection "1; mode=block" + Strict-Transport-Security "max-age=31536000; includeSubDomains" X-Content-Type-Options "nosniff" Permissions-Policy "accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=(),interest-cohort=()" Referrer-Policy "no-referrer" @@ -70,6 +70,8 @@ reverse_proxy searxng:8080 { header_up X-Forwarded-Port {http.request.port} header_up X-Forwarded-Proto {http.request.scheme} + header_up X-Real-IP {remote_host} } } } +{% endif %}