Merge pull request #69436 from tshaynik/fix/nextcloud-nginx-sts

nixos/nextcloud: add Strict-Transport-Security
This commit is contained in:
Aaron Andersen 2019-10-26 12:34:36 -04:00 committed by GitHub
commit 33474166e3
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -532,6 +532,7 @@ in {
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
add_header Referrer-Policy no-referrer;
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
error_page 403 /core/templates/403.php;
error_page 404 /core/templates/404.php;
client_max_body_size ${cfg.maxUploadSize};