diff --git a/reverse-proxy.conf b/reverse-proxy.conf index 41c4fc0..69c28d8 100644 --- a/reverse-proxy.conf +++ b/reverse-proxy.conf @@ -72,6 +72,7 @@ server { # Set the security headers + add-header Permissions-Policy "interest-cohort=()"; # Don't allow Google FLoC add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; #HSTS add_header X-Frame-Options DENY; #Prevents clickjacking add_header X-Content-Type-Options nosniff; #Prevents mime sniffing diff --git a/subdomain-proxy.conf b/subdomain-proxy.conf index c38b0ad..d9842f8 100644 --- a/subdomain-proxy.conf +++ b/subdomain-proxy.conf @@ -46,6 +46,7 @@ server { # Set the security headers + add-header Permissions-Policy "interest-cohort=()"; # Don't allow Google FLoC add_header Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"; #HSTS add_header X-Frame-Options DENY; #Prevents clickjacking add_header X-Content-Type-Options nosniff; #Prevents mime sniffing