From aa589960b131f83cc184ad31688dc641e0ac15a8 Mon Sep 17 00:00:00 2001 From: Amritanshu Date: Sun, 6 Aug 2023 09:20:57 +0530 Subject: [PATCH] Updated the nginx.conf --- nextcloud/playbook.yml | 2 +- nextcloud/web/nginx.conf | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/nextcloud/playbook.yml b/nextcloud/playbook.yml index 8147b0a..10c2d8c 100755 --- a/nextcloud/playbook.yml +++ b/nextcloud/playbook.yml @@ -1,5 +1,5 @@ ################################################# -# DO Community Playbooks: Docker +# DO Community Playbooks: Nextcloud ################################################# --- - hosts: all diff --git a/nextcloud/web/nginx.conf b/nextcloud/web/nginx.conf index 802e955..24cbf78 100644 --- a/nextcloud/web/nginx.conf +++ b/nextcloud/web/nginx.conf @@ -73,13 +73,13 @@ http { #pagespeed off; # HTTP response headers borrowed from Nextcloud `.htaccess` - add_header Referrer-Policy "no-referrer" always; - add_header X-Content-Type-Options "nosniff" always; - add_header X-Download-Options "noopen" always; - add_header X-Frame-Options "SAMEORIGIN" always; - add_header X-Permitted-Cross-Domain-Policies "none" always; - add_header X-Robots-Tag "none" always; - add_header X-XSS-Protection "1; mode=block" always; + add_header Referrer-Policy "no-referrer" always; + add_header X-Content-Type-Options "nosniff" always; + add_header X-Download-Options "noopen" always; + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-Permitted-Cross-Domain-Policies "none" always; + add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive" always; + add_header X-XSS-Protection "1; mode=block" always; # Remove X-Powered-By, which is an information leak fastcgi_hide_header X-Powered-By;