feat: hardening medias.nupes.social

2024-07-05 11:53:40 +02:00
parent 5cfc659960
commit eb66277537
1 changed files with 2 additions and 0 deletions
--- a/roles/nginx/templates/vhosts/medias.nupes.social.conf.j2
+++ b/roles/nginx/templates/vhosts/medias.nupes.social.conf.j2
@@ -49,5 +49,7 @@ server {
 		add_header Cache-Control public;
 		add_header 'Access-Control-Allow-Origin' '*';
 		add_header X-Cache-Status $upstream_cache_status;
+		add_header X-Content-Type-Options nosniff;
+		add_header Content-Security-Policy "default-src 'none'; form-action 'none'";
 	}
 }