diff --git a/etc/nginx/conf.d/bitbot.conf.nginx b/etc/nginx/conf.d/bitbot.conf.nginx index 366f166d..47792a01 100644 --- a/etc/nginx/conf.d/bitbot.conf.nginx +++ b/etc/nginx/conf.d/bitbot.conf.nginx @@ -13,4 +13,4 @@ server { location / { proxy_pass http://[::1]:9050; } -} \ No newline at end of file +} diff --git a/etc/nginx/conf.d/default.conf.nginx b/etc/nginx/conf.d/default.conf.nginx index 7973bbc4..3ff84e9f 100644 --- a/etc/nginx/conf.d/default.conf.nginx +++ b/etc/nginx/conf.d/default.conf.nginx @@ -47,4 +47,4 @@ server { #location ~ /\.ht { # deny all; #} -} \ No newline at end of file +} diff --git a/etc/nginx/sites-enabled/old/host.nginx b/etc/nginx/sites-enabled/old/host.nginx index 73148cc4..6ffc7ea2 100644 --- a/etc/nginx/sites-enabled/old/host.nginx +++ b/etc/nginx/sites-enabled/old/host.nginx @@ -27,10 +27,10 @@ server { ssl_prefer_server_ciphers on; # Enable this if your want HSTS (recommended) add_header Strict-Transport-Security - "max-age=15552000; includeSubdomains; preload"; + "max-age=15552000; includeSubdomains; preload"; add_header X-Frame-Options SAMEORIGIN; add_header Content-Security-Policy - upgrade-insecure-requests; + upgrade-insecure-requests; add_header X-Xss-Protection "1; mode=block" always; add_header X-Content-Type-Options "nosniff" always; # OCSP Stapling --- @@ -84,4 +84,4 @@ server { location ~ /\.ht { deny all; } -} \ No newline at end of file +} diff --git a/etc/nginx/sites-enabled/rproxy.nginx b/etc/nginx/sites-enabled/rproxy.nginx index 322946f8..6802dfe1 100644 --- a/etc/nginx/sites-enabled/rproxy.nginx +++ b/etc/nginx/sites-enabled/rproxy.nginx @@ -5,7 +5,7 @@ server { listen [::]:443; # Enable this if your want HSTS (recommended) add_header Strict-Transport-Security - "max-age=15552000; includeSubdomains; preload"; + "max-age=15552000; includeSubdomains; preload"; add_header X-Frame-Options SAMEORIGIN; add_header Content-Security-Policy upgrade-insecure-requests; add_header X-Xss-Protection "1; mode=block" always; @@ -17,4 +17,4 @@ server { location / { proxy_pass http://localhost:8080; } -} \ No newline at end of file +} diff --git a/etc/nginx/sites-enabled/vhost.nginx b/etc/nginx/sites-enabled/vhost.nginx index 5b8ab4d0..66cbc488 100644 --- a/etc/nginx/sites-enabled/vhost.nginx +++ b/etc/nginx/sites-enabled/vhost.nginx @@ -6,7 +6,7 @@ server { listen [::]:443; # Enable this if your want HSTS (recommended) add_header Strict-Transport-Security - "max-age=15552000; includeSubdomains; preload"; + "max-age=15552000; includeSubdomains; preload"; add_header X-Frame-Options SAMEORIGIN; add_header Content-Security-Policy upgrade-insecure-requests; add_header X-Xss-Protection "1; mode=block" always; @@ -57,4 +57,4 @@ server { location ~ /\.ht { deny all; } -} \ No newline at end of file +}