Add cookie secure flag

Signed-off-by: Tommy <contact@tommytran.io>
2025-01-03 09:13:14 -07:00
parent 819c0e6372
commit 1ca56b7039
1 changed files with 5 additions and 2 deletions
--- a/etc/nginx/conf.d/default.conf
+++ b/etc/nginx/conf.d/default.conf
@@ -36,13 +36,16 @@ ssl_session_ticket_key session-ticket-keys/1.key;
 ## ssl_trusted_certificate
 ## ssl_stapling_file

-# Disable server tokens
-server_tokens off;
+# Cookie flags
+proxy_cookie_flags ~ secure;

 # Disable compression
 ## Mitigates oracle attacks
 gzip off;

+# Disable server tokens
+server_tokens off;
+
 server {
    listen ipv4_1:80 default_server;
    listen [ipv6_1]:80 default_server;