titanz/NGINX-Configs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Split out cross origin security headers

Browse Source
This commit is contained in:
Tommy 2024-06-25 15:10:02 -07:00 committed by GitHub
parent e64e242e42
commit 03149c183c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 12 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
etc/nginx/conf.d/sites_uptime-kuma.conf
View File

@ -16,6 +16,7 @@ server {
include snippets/universal_paths.conf; include snippets/universal_paths.conf;
include snippets/hsts.conf; include snippets/hsts.conf;
include snippets/security.conf; include snippets/security.conf;
include snippets/cross-origin-security.conf;
include snippets/quic.conf; include snippets/quic.conf;
include snippets/proxy.conf; include snippets/proxy.conf;
proxy_hide_header Content-Security-Policy; proxy_hide_header Content-Security-Policy;

11
etc/nginx/snippets/cross-origin-security.conf Normal file
View File

@ -0,0 +1,11 @@
# CORP, COOP, and COEP headers
# Meant to be used globally, but some apps may need a manual overwrite, so this is split out from security.conf
proxy_hide_header Cross-Origin-Resource-Policy;
add_header Cross-Origin-Resource-Policy cross-origin always;
proxy_hide_header Cross-Origin-Opener-Policy;
add_header Cross-Origin-Opener-Policy same-origin always;
proxy_hide_header Cross-Origin-Opener-Policy;
Cross-Origin-Embedder-Policy require-corp always;

6
etc/nginx/snippets/security.conf
View File

@ -13,12 +13,6 @@ add_header X-Content-Type-Options "nosniff" always;
proxy_hide_header X-Frame-Options; proxy_hide_header X-Frame-Options;
add_header X-Frame-Options "SAMEORIGIN" always; add_header X-Frame-Options "SAMEORIGIN" always;
proxy_hide_header Cross-Origin-Resource-Policy;
add_header Cross-Origin-Resource-Policy cross-origin always;
proxy_hide_header Cross-Origin-Opener-Policy;
add_header Cross-Origin-Opener-Policy same-origin always;
# Obsolete and replaced by Content-Security-Policy # Obsolete and replaced by Content-Security-Policy
# Only here to pass Hardenize checks # Only here to pass Hardenize checks
proxy_hide_header X-XSS-Protection; proxy_hide_header X-XSS-Protection;