diff options
author | Stavros Kois <47820033+stavros-k@users.noreply.github.com> | 2023-04-02 19:33:05 +0300 |
---|---|---|
committer | GitHub <noreply@github.com> | 2023-04-02 16:33:05 +0000 |
commit | 8df9b2617eaf985762a36a21b83364c057e4fcdd (patch) | |
tree | f7101ba978e171d1d7f831249b52a07def0c1a36 /.examples/docker-compose/insecure/postgres/fpm/web/nginx.conf | |
parent | ee394835b759433e1a613c627479a0faa38862dd (diff) |
Updates X-Robot-Tag in nginx.conf examples (#1960)
* Update X-Robot-Tag in nginx.conf example
Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
* update nginx.conf examples
* Update .examples/docker-compose/insecure/mariadb/fpm/web/nginx.conf
Co-authored-by: J0WI <J0WI@users.noreply.github.com>
Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
* apply to all files
---------
Signed-off-by: Stavros Kois <47820033+stavros-k@users.noreply.github.com>
Co-authored-by: J0WI <J0WI@users.noreply.github.com>
Diffstat (limited to '.examples/docker-compose/insecure/postgres/fpm/web/nginx.conf')
-rw-r--r-- | .examples/docker-compose/insecure/postgres/fpm/web/nginx.conf | 14 |
1 files changed, 7 insertions, 7 deletions
diff --git a/.examples/docker-compose/insecure/postgres/fpm/web/nginx.conf b/.examples/docker-compose/insecure/postgres/fpm/web/nginx.conf index 814a0f4b..16348de6 100644 --- a/.examples/docker-compose/insecure/postgres/fpm/web/nginx.conf +++ b/.examples/docker-compose/insecure/postgres/fpm/web/nginx.conf @@ -61,13 +61,13 @@ http { #pagespeed off; # HTTP response headers borrowed from Nextcloud `.htaccess` - add_header Referrer-Policy "no-referrer" always; - add_header X-Content-Type-Options "nosniff" always; - add_header X-Download-Options "noopen" always; - add_header X-Frame-Options "SAMEORIGIN" always; - add_header X-Permitted-Cross-Domain-Policies "none" always; - add_header X-Robots-Tag "none" always; - add_header X-XSS-Protection "1; mode=block" always; + add_header Referrer-Policy "no-referrer" always; + add_header X-Content-Type-Options "nosniff" always; + add_header X-Download-Options "noopen" always; + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-Permitted-Cross-Domain-Policies "none" always; + add_header X-Robots-Tag "noindex, nofollow" always; + add_header X-XSS-Protection "1; mode=block" always; # Remove X-Powered-By, which is an information leak fastcgi_hide_header X-Powered-By; |