fix: improve nextcloud security

2026-01-23 16:05:45 +00:00
parent 2e0b492a31
commit 3d56a9014c
1 changed files with 13 additions and 1 deletions
--- a/14
+++ b/14
@@ -286,6 +286,16 @@ motsdepasse.interstices.pro {
 }

 nextcloud.lucasroyer.fr {
+	# Security
+    header {
+        X-Frame-Options "SAMEORIGIN"
+        X-Content-Type-Options "nosniff"
+        X-XSS-Protection "1; mode=block"
+        Referrer-Policy "no-referrer"
+        Strict-Transport-Security "max-age=15552000; includeSubDomains; preload"
+        -Server
+    }
+
 	# Large files
 	request_body {
 		max_size 10GB
@@ -303,7 +313,9 @@ nextcloud.lucasroyer.fr {
 	reverse_proxy nextcloud-web:80 {
 		header_up Host {host}
 		header_up X-Real-IP {remote_host}
-	}
+        header_down X-Frame-Options "SAMEORIGIN"
+        header_down X-Content-Type-Options "nosniff"
+    }
 }

 onlyoffice.lucasroyer.fr {