diff options
Diffstat (limited to 'hosts/vps')
| -rw-r--r-- | hosts/vps/website.nix | 17 |
1 files changed, 11 insertions, 6 deletions
diff --git a/hosts/vps/website.nix b/hosts/vps/website.nix index ff5d0d9..c1aad64 100644 --- a/hosts/vps/website.nix +++ b/hosts/vps/website.nix @@ -9,23 +9,28 @@ default = '' header { -Server + -Date + -Last-Modified + -Etag + -Accept-Ranges # disable indexing by search engines X-Robots-Tag "noindex, nofollow" - # disable FLoC tracking - Permissions-Policy interest-cohort=() + + # disable FLoC tracking + # Permissions-Policy interest-cohort=() # enable HSTS - Strict-Transport-Security max-age=31536000; + # Strict-Transport-Security max-age=31536000; # disable clients from sniffing the media type - X-Content-Type-Options nosniff + # X-Content-Type-Options nosniff # clickjacking protection - X-Frame-Options DENY + # X-Frame-Options DENY # keep referrer data off of HTTP connections - Referrer-Policy no-referrer-when-downgrade + # Referrer-Policy no-referrer-when-downgrade } ''; }; |