infra
/
ansible
4
5
Fork 5
Code Issues 6 Pull Requests Activity

Add recommended headers to owncloud vhost.

This commit is contained in:
Markus 2016-04-06 10:10:06 +02:00
parent 07ca697e63
commit 072a7d9cf8
2 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
roles/owncloud/templates/certs.j2
View File

@ -5,7 +5,7 @@
user: root
group: root
perm: '400'
format: crt
format: crt,ca
notify: 'service nginx restart'
- path: /etc/nginx/ssl/{{ owncloud_domain }}.key
user: root

7
roles/owncloud/templates/vhost.j2
View File

@ -23,6 +23,13 @@ server {
ssl_certificate_key /etc/nginx/ssl/{{ owncloud_domain }}.key;
ssl_certificate /etc/nginx/ssl/{{ owncloud_domain }}.crt;
# Add headers to serve security related headers
#add_header Strict-Transport-Security "max-age=15768000; includeSubDomains; preload;";
add_header X-Content-Type-Options nosniff;
add_header X-Frame-Options "SAMEORIGIN";
add_header X-XSS-Protection "1; mode=block";
add_header X-Robots-Tag none;
root /var/www/owncloud/;
# set max upload size