uumas/ansible-matrix
1
0
Fork 0
Code Issues 7 Pull Requests Projects Releases Wiki Activity

add nginx role

Browse Source
This commit is contained in:
uumas
2023-04-19 00:24:44 +03:00
parent b5300f445d
commit 70a4684f51
7 changed files with 276 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
roles/nginx/templates/conf/ssl-headers.conf.j2 Normal file
View File

@@ -0,0 +1,12 @@
# {{ ansible_managed }}
# Strict Transport Security (HSTS), Tell browsers to use only https (adding includeSubDomains would also force subdomains to use HSTS)
add_header Strict-Transport-Security "max-age=15552000; preload" always;
# Expect Certificate Transparency and -Stapling, Security measures for checking HTTPS-certificate validity/revocation
add_header Expect-CT 'enforce; max-age=86400;' always;
add_header Expect-Staple 'max-age=86400; preload' always;
add_header Referrer-Policy "no-referrer-when-downgrade" always;
add_header X-Content-Type-Options "nosniff" always;
add_header X-Xss-Protection "1; mode=block" always;
add_header X-Frame-Options "SAMEORIGIN" always;