update headers

This commit is contained in:
AtomHare 2021-09-18 19:17:25 +02:00 committed by GitHub
parent f5eb529dc1
commit 8d82be9518
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -8,10 +8,36 @@
FRONTEND_HOSTNAME { FRONTEND_HOSTNAME {
reverse_proxy pipedfrontend:80 reverse_proxy pipedfrontend:80
header {
# disable FLoC tracking
Permissions-Policy interest-cohort=()
# enable HSTS
Strict-Transport-Security max-age=31536000;
# keep referrer data off
Referrer-Policy no-referrer
# prevent for appearing in search engine for private instances (option)
#X-Robots-Tag noindex
}
} }
BACKEND_HOSTNAME { BACKEND_HOSTNAME {
reverse_proxy varnish:80 reverse_proxy varnish:80
header {
# disable FLoC tracking
Permissions-Policy interest-cohort=()
# enable HSTS
Strict-Transport-Security max-age=31536000;
# keep referrer data off
Referrer-Policy no-referrer
# prevent for appearing in search engine for private instances (option)
#X-Robots-Tag noindex
}
} }
PROXY_HOSTNAME { PROXY_HOSTNAME {
@ -22,8 +48,22 @@ PROXY_HOSTNAME {
method OPTIONS method OPTIONS
} }
header Access-Control-Allow-Origin * header {
header Access-Control-Allow-Headers * Access-Control-Allow-Origin *
Access-Control-Allow-Headers *
# disable FLoC tracking
Permissions-Policy interest-cohort=()
# enable HSTS
Strict-Transport-Security max-age=31536000;
# keep referrer data off
Referrer-Policy no-referrer
# prevent for appearing in search engine for private instances (option)
#X-Robots-Tag noindex
}
route { route {