From fe20973cf05bcb0dc72ab8fd7510f2b7176b8f7f Mon Sep 17 00:00:00 2001 From: Administrator Date: Wed, 31 Aug 2022 15:08:34 +0300 Subject: [PATCH] ssl --- nginx/nginx-dev/nginx-dev.conf | 12 +++++++++++- 1 file changed, 11 insertions(+), 1 deletion(-) diff --git a/nginx/nginx-dev/nginx-dev.conf b/nginx/nginx-dev/nginx-dev.conf index 7d9d20d..7340f89 100644 --- a/nginx/nginx-dev/nginx-dev.conf +++ b/nginx/nginx-dev/nginx-dev.conf @@ -31,9 +31,19 @@ http { } server { - listen 80; + listen 443 ssl http2; + listen [::]:443 ssl http2; server_name battleship.develop.sprinthub.ru; + ssl_certificate /etc/nginx/fullchain.pem; + ssl_certificate_key /etc/nginx/privkey.pem; + + add_header X-Frame-Options "SAMEORIGIN" always; + add_header X-XSS-Protection "1; mode=block" always; + add_header X-Content-Type-Options "nosniff" always; + add_header Referrer-Policy "no-refferer-when-downgrade" always; + add_header Content-Secure-Policy "default-src * data: 'unsafe-eval' 'unsafe-inline'" always; + location / { proxy_pass http://battleship-nginx:1236/; }