davide
0395a78008
- middleware.ts: set X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, Content-Security-Policy on all responses - Caddyfile: add Strict-Transport-Security (HSTS 1y), X-Frame-Options, X-Content-Type-Options at reverse proxy level
13 lines
274 B
Caddyfile
13 lines
274 B
Caddyfile
localhost {
|
|
header {
|
|
Strict-Transport-Security "max-age=31536000; includeSubDomains"
|
|
X-Frame-Options "DENY"
|
|
X-Content-Type-Options "nosniff"
|
|
}
|
|
handle /uploads/* {
|
|
root * /srv
|
|
file_server
|
|
}
|
|
reverse_proxy app:3000
|
|
}
|