Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 23baed3e authored by Nicolas Gelot's avatar Nicolas Gelot
Browse files

Remove duplicate header from nginx 

Some security headers are added in searx conf since v0.18.0
parent 39aa1415

etc/nginx/conf.d/spot.conf

+0 −4
Original line number Diff line number Diff line
@@ -14,13 +14,9 @@ server { 
  listen 80;

  server_name _;



  add_header Referrer-Policy "no-referrer, strict-origin-when-cross-origin";

  add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload";

  add_header Content-Security-Policy "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; form-action 'self'; font-src 'self'; frame-ancestors 'self'; base-uri 'self'; connect-src 'self' https://overpass-api.de; img-src 'self' __SPOT_MORTY_URL__ data: https://*.tile.openstreetmap.org; frame-src https://www.youtube-nocookie.com https://player.vimeo.com https://www.dailymotion.com https://www.deezer.com https://www.mixcloud.com https://w.soundcloud.com https://embed.spotify.com";

  add_header X-Frame-Options "SAMEORIGIN";

  add_header X-XSS-Protection "1; mode=block";

  add_header X-Content-Type-Options "nosniff";

  add_header X-Robots-Tag "noindex, noarchive, nofollow";



  root /var/www/spot;