fix(reverse-proxy): 🐛 combine add_header directives into server includes

This commit is contained in:
Collin M. Barrett 2021-01-23 15:53:09 -06:00
parent 363249ee46
commit 219a79a0de
4 changed files with 2 additions and 3 deletions

View file

@ -1,7 +1,6 @@
server {
listen 80 default_server;
include svr-includes/*;
add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; img-src 'self' validator.swagger.io data:; manifest-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'none'; frame-ancestors 'none';" always;
location ^~ /api/archival/ {
rewrite ^/api/archival/(.*)$ /$1 break;

View file

@ -4,8 +4,7 @@ server {
include svr-includes/*;
ssl_certificate /etc/nginx/cert/filterlists_cert.pem;
ssl_certificate_key /etc/nginx/cert/filterlists_key.pem;
add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; img-src 'self' validator.swagger.io data:; manifest-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'none'; frame-ancestors 'none';" always;
location ^~ /api/archival/ {
rewrite ^/api/archival/(.*)$ /$1 break;
proxy_pass http://archival-api:80;

View file

@ -0,0 +1 @@
add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; img-src 'self' validator.swagger.io data:; manifest-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; base-uri 'self'; form-action 'none'; frame-ancestors 'none';" always;