Skip to content

Instantly share code, notes, and snippets.

@fabriziosalmi

fabriziosalmi/haproxy_security_headers.conf

Last active November 29, 2021 20:52
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save fabriziosalmi/ad9b3fffddbf1b8acbe4c20d15877d79 to your computer and use it in GitHub Desktop.
Save fabriziosalmi/ad9b3fffddbf1b8acbe4c20d15877d79 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
haproxy_security_headers.conf
# Sampling of security headers
http-response set-header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
http-response set-header X-Frame-Options "SAMEORIGIN"
http-response set-header X-XSS-Protection "1; mode=block"
http-response set-header Referrer-Policy "no-referrer-when-downgrade"
http-response set-header X-Content-Type-Options "nosniff"
http-response set-header Referrer-Policy "strict-origin-when-cross-origin"
http-response set-header Permissions-Policy "geolocation=(), microphone=()"
http-response set-header Content-Security-Policy-Report-Only ""
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment