diff --git a/nextcloud/playbook.yml b/nextcloud/playbook.yml index 8147b0a..10c2d8c 100755 --- a/nextcloud/playbook.yml +++ b/nextcloud/playbook.yml @@ -1,5 +1,5 @@ ################################################# -# DO Community Playbooks: Docker +# DO Community Playbooks: Nextcloud ################################################# --- - hosts: all diff --git a/nextcloud/web/nginx.conf b/nextcloud/web/nginx.conf index 802e955..24cbf78 100644 --- a/nextcloud/web/nginx.conf +++ b/nextcloud/web/nginx.conf @@ -73,13 +73,13 @@ http { #pagespeed off; # HTTP response headers borrowed from Nextcloud `.htaccess` - add_header Referrer-Policy "no-referrer" always; - add_header X-Content-Type-Options "nosniff" always; - add_header X-Download-Options "noopen" always; - add_header X-Frame-Options "SAMEORIGIN" always; - add_header X-Permitted-Cross-Domain-Policies "none" always; - add_header X-Robots-Tag "none" always; - add_header X-XSS-Protection "1; mode=block" always; + add_header Referrer-Policy "no-referrer" always; + add_header X-Content-Type-Options "nosniff" always; + add_header X-Download-Options "noopen" always; + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-Permitted-Cross-Domain-Policies "none" always; + add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive" always; + add_header X-XSS-Protection "1; mode=block" always; # Remove X-Powered-By, which is an information leak fastcgi_hide_header X-Powered-By;