fix(docker): fix nginx config for selfserve & internal (#88)

dvsa · Apr 26, 2024 · ecff991 · ecff991
1 parent def2ba5
commit ecff991
Show file tree

Hide file tree

Showing 2 changed files with 18 additions and 6 deletions.
diff --git a/infra/docker/internal/internal.conf b/infra/docker/internal/internal.conf
@@ -17,13 +17,19 @@ map $sent_http_content_type $referrer_policy {
   ~*text/(css|html|javascript)|application\/pdf|xml "strict-origin-when-cross-origin";
 }
 
+# Add X-Frame-Options for HTML documents.
+# h5bp/security/x-frame-options.conf
+map $sent_http_content_type $x_frame_options {
+  ~*text/html DENY;
+}
+
 server {
-  listen 8080;
-  listen [::]:8080;
+  listen 80;
+  listen [::]:80;
 
   server_name _;
 
-  root /var/www/public;
+  root /var/www/html/public;
 
   # Protect website against clickjacking.
   #

diff --git a/infra/docker/selfserve/selfserve.conf b/infra/docker/selfserve/selfserve.conf
@@ -17,13 +17,19 @@ map $sent_http_content_type $referrer_policy {
   ~*text/(css|html|javascript)|application\/pdf|xml "strict-origin-when-cross-origin";
 }
 
+# Add X-Frame-Options for HTML documents.
+# h5bp/security/x-frame-options.conf
+map $sent_http_content_type $x_frame_options {
+  ~*text/html DENY;
+}
+
 server {
-  listen 8080;
-  listen [::]:8080;
+  listen 80;
+  listen [::]:80;
 
   server_name _;
 
-  root /var/www/public;
+  root /var/www/html/public;
 
   # Protect website against clickjacking.
   #