| @@ -288,7 +288,7 @@ matrix_nginx_proxy_floc_optout_enabled: true | |||||
| # - https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security | # - https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security | ||||
| # - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security | # - https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security | ||||
| # - https://hstspreload.org/#opt-in | # - https://hstspreload.org/#opt-in | ||||
| matrix_nginx_proxy_hsts_preload_enable: false | |||||
| matrix_nginx_proxy_hsts_preload_enabled: false | |||||
| # X-XSS-Protection Enable | # X-XSS-Protection Enable | ||||
| # Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks. | # Stops pages from loading when they detect reflected cross-site scripting (XSS) attacks. | ||||
| @@ -10,7 +10,7 @@ | |||||
| add_header Permissions-Policy interest-cohort=() always; | add_header Permissions-Policy interest-cohort=() always; | ||||
| {% endif %} | {% endif %} | ||||
| {% if matrix_nginx_proxy_hsts_preload_enable %} | |||||
| {% if matrix_nginx_proxy_hsts_preload_enabled %} | |||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | ||||
| {% else %} | {% else %} | ||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | ||||
| @@ -3,7 +3,7 @@ | |||||
| {% macro render_vhost_directives() %} | {% macro render_vhost_directives() %} | ||||
| gzip on; | gzip on; | ||||
| gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | ||||
| {% if matrix_nginx_proxy_hsts_preload_enable %} | |||||
| {% if matrix_nginx_proxy_hsts_preload_enabled %} | |||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | ||||
| {% else %} | {% else %} | ||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | ||||
| @@ -4,7 +4,7 @@ | |||||
| gzip on; | gzip on; | ||||
| gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | ||||
| {% if matrix_nginx_proxy_hsts_preload_enable %} | |||||
| {% if matrix_nginx_proxy_hsts_preload_enabled %} | |||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | ||||
| {% else %} | {% else %} | ||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | ||||
| @@ -3,7 +3,7 @@ | |||||
| {% macro render_vhost_directives() %} | {% macro render_vhost_directives() %} | ||||
| gzip on; | gzip on; | ||||
| gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | ||||
| {% if matrix_nginx_proxy_hsts_preload_enable %} | |||||
| {% if matrix_nginx_proxy_hsts_preload_enabled %} | |||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | ||||
| {% else %} | {% else %} | ||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | ||||
| @@ -21,7 +21,7 @@ | |||||
| add_header Permissions-Policy interest-cohort=() always; | add_header Permissions-Policy interest-cohort=() always; | ||||
| {% endif %} | {% endif %} | ||||
| {% if matrix_nginx_proxy_hsts_preload_enable %} | |||||
| {% if matrix_nginx_proxy_hsts_preload_enabled %} | |||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | ||||
| {% else %} | {% else %} | ||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | ||||
| @@ -4,7 +4,7 @@ | |||||
| gzip on; | gzip on; | ||||
| gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | ||||
| {% if matrix_nginx_proxy_hsts_preload_enable %} | |||||
| {% if matrix_nginx_proxy_hsts_preload_enabled %} | |||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | ||||
| {% else %} | {% else %} | ||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | ||||
| @@ -3,7 +3,7 @@ | |||||
| {% macro render_vhost_directives() %} | {% macro render_vhost_directives() %} | ||||
| gzip on; | gzip on; | ||||
| gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | ||||
| {% if matrix_nginx_proxy_hsts_preload_enable %} | |||||
| {% if matrix_nginx_proxy_hsts_preload_enabled %} | |||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | ||||
| {% else %} | {% else %} | ||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | ||||
| @@ -5,7 +5,7 @@ | |||||
| add_header Permissions-Policy interest-cohort=() always; | add_header Permissions-Policy interest-cohort=() always; | ||||
| {% endif %} | {% endif %} | ||||
| {% if matrix_nginx_proxy_hsts_preload_enable %} | |||||
| {% if matrix_nginx_proxy_hsts_preload_enabled %} | |||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | ||||
| {% else %} | {% else %} | ||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | ||||
| @@ -3,7 +3,7 @@ | |||||
| {% macro render_vhost_directives() %} | {% macro render_vhost_directives() %} | ||||
| gzip on; | gzip on; | ||||
| gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | gzip_types text/plain application/json application/javascript text/css image/x-icon font/ttf image/gif; | ||||
| {% if matrix_nginx_proxy_hsts_preload_enable %} | |||||
| {% if matrix_nginx_proxy_hsts_preload_enabled %} | |||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" always; | ||||
| {% else %} | {% else %} | ||||
| add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; | ||||