servnest
/
system
Archived
1
0
Fork 0
This repository has been archived on 2022-10-07. You can view files and clone it, but cannot push or open issues or pull requests.
system/config/nginx/inc/security.conf

25 lines
795 B
Plaintext
Executable File

more_set_headers "X-Content-Type-Options : nosniff";
more_set_headers "X-XSS-Protection : 1; mode=block";
more_set_headers "X-Download-Options : noopen";
more_set_headers "X-Permitted-Cross-Domain-Policies : none";
more_set_headers "X-Frame-Options : DENY";
more_set_headers "Referrer-Policy : no-referrer";
more_set_headers "Strict-Transport-Security : max-age=94608000; includeSubDomains; preload";
#more_set_headers "Server : nginx Niver";
more_clear_headers Server;
ssl_session_timeout 1d;
ssl_session_cache shared:SSL:50m;
ssl_session_tickets off;
ssl_prefer_server_ciphers off;
ssl_stapling on;
ssl_stapling_verify on;
ssl_certificate /etc/letsencrypt/live/niver.atope.art/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/niver.atope.art/privkey.pem;
autoindex off;
gzip off;