|
|
|
@@ -1,7 +1,4 @@ |
|
|
|
matrix.DOMAIN.tld { |
|
|
|
|
|
|
|
tls {$CADDY_TLS} |
|
|
|
|
|
|
|
@identity { |
|
|
|
path /_matrix/identity/* |
|
|
|
} |
|
|
|
@@ -97,10 +94,7 @@ matrix.DOMAIN.tld:8448 { |
|
|
|
} |
|
|
|
|
|
|
|
dimension.DOMAIN.tld { |
|
|
|
|
|
|
|
tls {$CADDY_TLS} |
|
|
|
|
|
|
|
header { |
|
|
|
header { |
|
|
|
# Enable HTTP Strict Transport Security (HSTS) to force clients to always connect via HTTPS |
|
|
|
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" |
|
|
|
# Enable cross-site filter (XSS) and tell browser to block detected attacks |
|
|
|
@@ -127,9 +121,6 @@ dimension.DOMAIN.tld { |
|
|
|
} |
|
|
|
|
|
|
|
element.DOMAIN.tld { |
|
|
|
|
|
|
|
tls {$CADDY_TLS} |
|
|
|
|
|
|
|
header { |
|
|
|
# Enable HTTP Strict Transport Security (HSTS) to force clients to always connect via HTTPS |
|
|
|
Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" |
|
|
|
@@ -153,4 +144,4 @@ element.DOMAIN.tld { |
|
|
|
header_up X-Forwarded-TlsCipher {tls_cipher} |
|
|
|
header_up X-Forwarded-HttpsProto {proto} |
|
|
|
} |
|
|
|
} |
|
|
|
} |