|
|
|
@ -10,7 +10,7 @@
|
|
|
|
|
# add_header X-Content-Type-Options nosniff;
|
|
|
|
|
# add_header X-Frame-Options SAMEORIGIN;
|
|
|
|
|
add_header Referrer-Policy "strict-origin-when-cross-origin";
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
{% if matrix_nginx_proxy_floc_optout_enabled %}
|
|
|
|
|
add_header Permissions-Policy interest-cohort=() always;
|
|
|
|
|
{% endif %}
|
|
|
|
@ -88,8 +88,8 @@ server {
|
|
|
|
|
{% if matrix_nginx_proxy_ocsp_stapling_enabled %}
|
|
|
|
|
ssl_stapling on;
|
|
|
|
|
ssl_stapling_verify on;
|
|
|
|
|
ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem;
|
|
|
|
|
{% endif %}
|
|
|
|
|
ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_grafana_hostname }}/chain.pem;
|
|
|
|
|
{% endif %}
|
|
|
|
|
|
|
|
|
|
{{ render_vhost_directives() }}
|
|
|
|
|
}
|
|
|
|
|