|
|
|
@@ -10,7 +10,7 @@ |
|
|
|
# add_header X-Content-Type-Options nosniff; |
|
|
|
# add_header X-Frame-Options SAMEORIGIN; |
|
|
|
add_header Referrer-Policy "strict-origin-when-cross-origin"; |
|
|
|
|
|
|
|
|
|
|
|
{% if matrix_nginx_proxy_floc_optout_enabled %} |
|
|
|
add_header Permissions-Policy interest-cohort=() always; |
|
|
|
{% endif %} |
|
|
|
@@ -88,8 +88,8 @@ server { |
|
|
|
{% if matrix_nginx_proxy_ocsp_stapling_enabled %} |
|
|
|
ssl_stapling on; |
|
|
|
ssl_stapling_verify on; |
|
|
|
ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_base_domain_hostname }}/chain.pem; |
|
|
|
{% endif %} |
|
|
|
ssl_trusted_certificate {{ matrix_ssl_config_dir_path }}/live/{{ matrix_nginx_proxy_proxy_grafana_hostname }}/chain.pem; |
|
|
|
{% endif %} |
|
|
|
|
|
|
|
{{ render_vhost_directives() }} |
|
|
|
} |
|
|
|
|