noah/Nginx_Confs
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Secure, HTTPOnly, SameSite Cookies via proxy path

Browse Source
This commit is contained in:
Noah L. Schrick 2022-06-27 11:38:16 -05:00
parent 7ee69bf7e9
commit 97b9c7168a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
element/element.theschricks.com.conf
View File

@ -9,6 +9,7 @@ server {
location / { location / {
try_files $uri $uri/ =404; try_files $uri $uri/ =404;
proxy_cookie_path / "/; secure; HttpOnly; SameSite=strict";
} }
client_max_body_size 512m; client_max_body_size 512m;
@ -28,7 +29,6 @@ server {
add_header X-Frame-Options "SAMEORIGIN"; add_header X-Frame-Options "SAMEORIGIN";
add_header Referrer-Policy "strict-origin"; add_header Referrer-Policy "strict-origin";
add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()"; add_header Permissions-Policy "geolocation=(),midi=(),sync-xhr=(),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()";
add_header Set-Cookie "Path=/; HttpOnly; Secure";
# CSP # CSP
add_header Content-Security-Policy "frame-ancestors 'self'"; add_header Content-Security-Policy "frame-ancestors 'self'";