talexander/homepage
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Add some headers like HSTS.
All checks were successful
semver Build semver has succeeded
Details
build-homepage Build build-homepage has succeeded
Details

Browse Source
This commit is contained in:
Tom Alexander 2023-07-10 02:17:10 -04:00
parent 623da8a581
commit e3d52c2943
Signed by: talexander
GPG Key ID: D3A179C9A53C0EDE
3 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
docker/server/Dockerfile
View File

@ -5,6 +5,7 @@ RUN addgroup web && adduser -D -G web web && install -d -D -o web -g web -m 700
RUN ln -sf /dev/stdout /var/log/nginx/access.log && ln -sf /dev/stderr /var/log/nginx/error.log
COPY --chown=web:web docker/server/nginx.conf /srv/http
COPY --chown=web:web docker/server/headers.include /srv/http
COPY --chown=web:web static/ /srv/http/public/
ENTRYPOINT ["/usr/sbin/nginx", "-c", "/srv/http/nginx.conf", "-e", "stderr", "-g", "daemon off;"]

12
docker/server/headers.include Normal file
View File

@ -0,0 +1,12 @@
# Enable HTTP Strict Transport Security (HSTS) to force clients to
# always connect via HTTPS (do not use if only testing)
add_header Strict-Transport-Security "max-age=31536000;" always;
# Enable cross-site filter (XSS) and tell browser to block detected
# attacks
add_header X-XSS-Protection "1; mode=block" always;
# Prevent some browsers from MIME-sniffing a response away from the
# declared Content-Type
add_header X-Content-Type-Options "nosniff" always;
# Disallow the site to be rendered within a frame (clickjacking
# protection)
add_header X-Frame-Options "DENY" always;

2
docker/server/nginx.conf
View File

@ -19,6 +19,8 @@ http {
sendfile on;
tcp_nopush on;
include headers.include;
server {
listen 8080;
root /srv/http/public;