19 lines
845 B
Plaintext
19 lines
845 B
Plaintext
error_page 500 502 503 504 /500.html;
|
|
location = /500.html {
|
|
root /opt/pleroma/instance/static/static/error/500;
|
|
internal;
|
|
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
|
|
add_header X-Content-Type-Options "nosniff";
|
|
add_header X-XSS-Protection "1; mode=block";
|
|
add_header X-Permitted_Cross-Domain-Policies none;
|
|
add_header X-Frame-Options "self";
|
|
add_header Referrer-Policy "same-origin";
|
|
add_header X-Download-Options noopen;
|
|
|
|
# CSP
|
|
add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src 'self'; img-src 'self' https: data:; media-src 'self' https:; script-src 'self'; style-src 'self' 'unsafe-inline'; worker-src 'self'; frame-ancestors 'self'";
|
|
}
|
|
location = /static/sjw.asc {
|
|
alias /opt/pleroma/instance/static/static/sjw.asc;
|
|
}
|