Skip to content

Instantly share code, notes, and snippets.

@robcalcroft
Created November 5, 2017 01:28
Show Gist options
  • Save robcalcroft/76b1884a6911c81b0c3dd7dec6360cca to your computer and use it in GitHub Desktop.
Save robcalcroft/76b1884a6911c81b0c3dd7dec6360cca to your computer and use it in GitHub Desktop.
A Nginx configuration file including security settings for server blocks
add_header X-Xss-Protection "1; mode=block" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy no-referrer-when-downgrade;
add_header Strict-Transport-Security max-age=15768000;
add_header X-Frame-Options SAMEORIGIN;
proxy_hide_header X-Powered-By;
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment