sr.ht-nginx/port443.conf

20 lines
645 B
Plaintext

listen 443 ssl http2;
listen [::]:443 ssl http2;
add_header X-Clacks-Overhead "GNU Terry Pratchett";
add_header Content-Security-Policy "default-src 'none'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; script-src 'self' 'unsafe-inline' *.stripe.com *.stripe.network; frame-src *.stripe.com *.stripe.network" always;
add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always;
# Fuck you, Google, I don't spy on my users
add_header Permissions-Policy interest-cohort=();
gzip on;
gzip_types text/css text/html;
location ^~ /.well-known {
root /var/www;
}
location = /robots.txt {
root /var/www;
}