Skip to content

Instantly share code, notes, and snippets.

@woble
woble / _hsts.conf
Created June 10, 2022 18:53 — forked from R0GGER/_hsts.conf
Workaround - Security Headers @ NGINX Proxy Manager
{% if certificate and certificate_id > 0 -%}
{% if ssl_forced == 1 or ssl_forced == true %}
{% if hsts_enabled == 1 or hsts_enabled == true %}
# HSTS (ngx_http_headers_module is required) (63072000 seconds = 2 years)
add_header Strict-Transport-Security "max-age=63072000;{% if hsts_subdomains == 1 or hsts_subdomains == true -%} includeSubDomains;{% endif %} preload" always;
add_header Referrer-Policy strict-origin-when-cross-origin;
add_header X-Content-Type-Options nosniff;
add_header X-XSS-Protection "1; mode=block";
add_header X-Frame-Options SAMEORIGIN;
add_header Content-Security-Policy upgrade-insecure-requests;

The Freenode resignation FAQ, or: "what the fuck is going on?"

Update 2

Freenode staff have stepped down. The network that runs at freenode.org/net/com should now be assumed to be under control of a malicious party. Andrew Lee will likely gain control over the NickServ database at some point.

I recommend that you move to libera.chat as soon as possible, as the former Freenode staff has left the network that exists on the Freenode domains, and so they can no longer guarantee the safety of your information or community there. Basically, libera.chat is the continuation of Freenode.