Commit Graph

2 Commits

Author SHA1 Message Date
Gurjit Singh 50c95b3d27 fix: add security headers to nginx configurations
- Add X-Frame-Options to prevent clickjacking attacks
- Add X-Content-Type-Options to prevent MIME-type sniffing
- Add Referrer-Policy for privacy protection
- Add Permissions-Policy to restrict unnecessary browser features
- Add HSTS header to SSL config for enforcing HTTPS connections
These headers are critical security measures that protect against
common web vulnerabilities and follow OWASP security best practices.
2025-11-28 12:38:56 +01:00
azurejelly c62633bd23
chore(docker): move nginx config to a separate folder
Also kept the example SSL config from #82 in case it is useful to someone
2025-07-25 19:23:39 -04:00