Use CSP config only in gitea

This commit is contained in:
coolneng 2022-10-23 10:53:40 +02:00
parent 801bc6f07d
commit dc1bb22d9d
Signed by: coolneng
GPG Key ID: 9893DA236405AF57
1 changed files with 8 additions and 1 deletions

View File

@ -69,7 +69,14 @@
"git.coolneng.duckdns.org" = {
enableACME = true;
forceSSL = true;
locations."/".proxyPass = "http://localhost:3000/";
locations."/" = {
proxyPass = "http://localhost:3000/";
extraConfig = ''
${config.services.nginx.commonHttpConfig}
# Disable embedding as a frame, except from the same origin
add_header Content-Security-Policy "frame-src git.coolneng.duckdns.org; frame-ancestors git.coolneng.duckdns.org";
'';
};
};
"rss.coolneng.duckdns.org" = {
enableACME = true;