struct(MOVE): move security headers to snippets from configs

2021-01-07 15:03:24 -07:00
parent e8b80833e6
commit a1c1ac280a
1 changed files with 2 additions and 2 deletions
@@ -0,0 +1,14 @@
+add_header Feature-Policy "geolocation 'self'";
+
+add_header Referrer-Policy "same-origin" always;
+
+add_header X-Content-Type-Options "nosniff" always;
+add_header X-Download-Options noopen;
+add_header X-Frame-Options SAMEORIGIN;
+add_header X-Permitted-Cross-Domain-Policies none;
+add_header X-UA-Compatible "IE=edge";
+add_header X-XSS-Protection "1; mode=block" always;
+
+# prevent search engines from indexing sites on this server
+# comment the line below if you are running public sites!
+add_header X-Robots-Tag none;