ThatGuyJack/nginx-proxy-manager
1
0
Fork 0
mirror of https://github.com/NginxProxyManager/nginx-proxy-manager.git synced 2025-08-02 15:33:32 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

fix stream/allow editing modsec conf/readme changes/dep updates

Browse Source 
Signed-off-by: Zoey <zoey@z0ey.de>
This commit is contained in:
Zoey
2023-10-29 11:29:55 +01:00
parent fa43fc2daa
commit 6548a7aea6
11 changed files with 71 additions and 100 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
rootfs/usr/local/nginx/conf/conf.d/include/hsts.conf
View File

@@ -2,6 +2,6 @@ more_set_headers "X-XSS-Protection: 0";
more_set_headers "X-Frame-Options: SAMEORIGIN";
more_set_headers "X-Content-Type-Options: nosniff";
more_set_headers "Referrer-Policy: strict-origin-when-cross-origin";
more_set_headers "Content-Security-Policy: upgrade-insecure-requests";
more_set_headers "Content-Security-Policy: $content_security_policy";
more_set_headers "Strict-Transport-Security: max-age=31536000; includeSubDomains; preload";
more_set_headers "Strict-Transport-Security: max-age=31536000; includeSubDomains; preload";

4
rootfs/usr/local/nginx/conf/conf.d/include/modsecurity-crs.conf Normal file
View File

@@ -0,0 +1,4 @@
Include /data/etc/modsecurity/modsecurity-default.conf
Include /data/etc/modsecurity/modsecurity-extra.conf
Include /data/etc/modsecurity/crs-setup.conf
Include /usr/local/nginx/conf/conf.d/include/coreruleset/rules/*.conf

2
rootfs/usr/local/nginx/conf/conf.d/include/modsecurity.conf Normal file
View File

@@ -0,0 +1,2 @@
Include /data/etc/modsecurity/modsecurity-default.conf
Include /data/etc/modsecurity/modsecurity-extra.conf

6
rootfs/usr/local/nginx/conf/nginx.conf
View File

@@ -62,9 +62,9 @@ http {
limit_req_zone $binary_remote_addr zone=one:10m rate=180r/s;
limit_req zone=one burst=1800;
# Default upstream scheme
map $host $forward_scheme {
default http;
map $upstream_http_content_security_policy $content_security_policy {
default $upstream_http_content_security_policy;
'' "upgrade-insecure-requests";
}
# Websocket