From 5b1932385afdc27abc5c20e79d115f67c2bb567e Mon Sep 17 00:00:00 2001 From: Arthur Lu Date: Mon, 22 May 2023 16:39:08 -0700 Subject: [PATCH] move proxy header overrides to proxy-params.conf --- proxy-params.conf | 14 ++++++++++++++ ssl-params.conf | 14 -------------- 2 files changed, 14 insertions(+), 14 deletions(-) diff --git a/proxy-params.conf b/proxy-params.conf index 740ce5c..2693d13 100644 --- a/proxy-params.conf +++ b/proxy-params.conf @@ -10,3 +10,17 @@ send_timeout 3600s; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-For $remote_addr; proxy_set_header Host $host; + +proxy_hide_header X-Powered-By; +proxy_hide_header X-Frame-Options; +add_header X-Frame-Options DENY; +proxy_hide_header X-XSS-Protection; +add_header X-XSS-Protection 0; +proxy_hide_header X-Content-Type-Options; +add_header X-Content-Type-Options nosniff; +proxy_hide_header Referrer-Policy; +add_header Referrer-Policy strict-origin-when-cross-origin; +proxy_hide_header Strict-Transport-Security; +add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload;"; +proxy_hide_header Access-Control-Allow-Origin; +add_header Access-Control-Allow-Origin https://tronnet.net; diff --git a/ssl-params.conf b/ssl-params.conf index c2e6538..af97e4c 100644 --- a/ssl-params.conf +++ b/ssl-params.conf @@ -14,17 +14,3 @@ ssl_dhparam /etc/ssl/certs/dhparam.pem; # ssl cert paths ssl_certificate /etc/letsencrypt/live/tronnet.net/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/tronnet.net/privkey.pem; - -proxy_hide_header X-Powered-By; -proxy_hide_header X-Frame-Options; -add_header X-Frame-Options DENY; -proxy_hide_header X-XSS-Protection; -add_header X-XSS-Protection 0; -proxy_hide_header X-Content-Type-Options; -add_header X-Content-Type-Options nosniff; -proxy_hide_header Referrer-Policy; -add_header Referrer-Policy strict-origin-when-cross-origin; -proxy_hide_header Strict-Transport-Security; -add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload;"; -proxy_hide_header Access-Control-Allow-Origin; -add_header Access-Control-Allow-Origin https://tronnet.net;