34 lines
963 B
C++
34 lines
963 B
C++
# SPDX-FileCopyrightText: 2018 - 2023 Daniel Wolf <nephatrine@gmail.com>
|
|
#
|
|
# SPDX-License-Identifier: ISC
|
|
|
|
#NOSSL:listen 80;
|
|
#NOSSL:listen [::]:80;
|
|
#SSL:listen 443 quic reuseport;
|
|
#SSL:listen 443 ssl;
|
|
#SSL:listen [::]:443 quic reuseport;
|
|
#SSL:listen [::]:443 ssl;
|
|
|
|
#SSL:http2 on;
|
|
#SSL:http3 on;
|
|
|
|
#SSL:ssl_certificate /mnt/config/ssl/live/example.net/fullchain.pem;
|
|
#SSL:ssl_certificate_key /mnt/config/ssl/live/example.net/privkey.pem;
|
|
#SSL:ssl_trusted_certificate /mnt/config/ssl/live/example.net/chain.pem;
|
|
#SSL:add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
|
|
#SSL:add_header Alt-Svc 'h3=":$server_port"; ma=86400';
|
|
|
|
autoindex off;
|
|
add_header X-Content-Type-Options nosniff;
|
|
add_header X-Frame-Options SAMEORIGIN;
|
|
add_header X-Robots-Tag noarchive;
|
|
add_header X-XSS-Protection "1; mode=block";
|
|
expires $expires;
|
|
|
|
set_real_ip_from 192.168.0.0/16;
|
|
real_ip_header X-Real-IP;
|
|
real_ip_recursive on;
|
|
|
|
location ~ /\. {
|
|
deny all;
|
|
} |