fix security policies

This commit is contained in:
2023-01-29 12:27:55 -06:00
parent 16ec6f7a92
commit e9d9d4baed

View File

@@ -1,15 +1,15 @@
server { server {
listen 8080; listen 8080;
server_name _; server_name asimonson.com;
add_header Content-Security-Policy "default-src 'self';"; add_header Content-Security-Policy "default-src 'self' 'unsafe-inline' *.chesscomfiles.com *.chess.com *.googletagmanager.com cdn.jsdelivr.net www.google-analytics.com ajax.googleapis.com;";
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
return 301 https://asimonson.com$request_uri;
location / { location / {
proxy_pass http://localhost:5000/; proxy_pass http://localhost:5000/;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
} }
return 301 https://$server_name$request_uri;
} }