Files
dwalin.netig.net/conf/websites.caddy
T
2026-10-18 19:19:58 +02:00

37 lines
1.1 KiB
Plaintext

netig.net {
encode zstd gzip
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains"
X-Content-Type-Options "nosniff"
X-Frame-Options "DENY"
Referrer-Policy "strict-origin-when-cross-origin"
Permissions-Policy "camera=(), microphone=(), geolocation=()"
Content-Security-Policy "default-src 'self'; script-src 'self'; connect-src 'self'; img-src 'self'; style-src 'self'; font-src 'self'; form-action 'self'; base-uri 'self'; frame-ancestors 'none'; object-src 'none'"
}
handle /contact/send {
reverse_proxy 127.0.0.1:9007
}
handle {
reverse_proxy 127.0.0.1:8000
}
}
https://lescarnetsdakkadien.netig.net {
# enable HSTS
header Strict-Transport-Security max-age=31536000;
# disable clients from sniffing the media type
header X-Content-Type-Options nosniff
# clickjacking protection
header X-Frame-Options DENY
reverse_proxy 127.0.0.1:8002
}
https://www.lachaussettedelocquirec.fr {
header Strict-Transport-Security max-age=31536000;
reverse_proxy 127.0.0.1:8003
}