diff options
| author | Christian Cleberg <[email protected]> | 2026-04-08 10:29:34 -0500 |
|---|---|---|
| committer | Christian Cleberg <[email protected]> | 2026-04-08 10:29:34 -0500 |
| commit | 253d3cf2990b0be4f4ae7b0b6f5b5edf51960db9 (patch) | |
| tree | d7859eff798f9f89791ef8b71eb0f87f910aadd5 /linux/nginx/etc | |
| parent | d5ee2ed1fe21fee36ccaacbde0615345348903ac (diff) | |
| download | dotfiles-253d3cf2990b0be4f4ae7b0b6f5b5edf51960db9.tar.gz dotfiles-253d3cf2990b0be4f4ae7b0b6f5b5edf51960db9.tar.bz2 dotfiles-253d3cf2990b0be4f4ae7b0b6f5b5edf51960db9.zip | |
fix CSP for img.cleberg.net
Diffstat (limited to 'linux/nginx/etc')
| -rw-r--r-- | linux/nginx/etc/nginx/nginx.conf | 10 |
1 files changed, 9 insertions, 1 deletions
diff --git a/linux/nginx/etc/nginx/nginx.conf b/linux/nginx/etc/nginx/nginx.conf index 13301ad..47a5032 100644 --- a/linux/nginx/etc/nginx/nginx.conf +++ b/linux/nginx/etc/nginx/nginx.conf @@ -143,7 +143,15 @@ http { # Add Content-Security-Policy for HTML documents. # custom.d/security/content-security-policy.conf map $sent_http_content_type $content_security_policy { - ~*text/(html|javascript)|application/pdf|xml "default-src 'self'; base-uri 'none'; form-action 'self'; frame-ancestors 'none'; object-src 'none'; upgrade-insecure-requests"; + ~*text/(html|javascript)|application/pdf|xml " + default-src 'self'; + img-src 'self' https://img.cleberg.net; + base-uri 'none'; + form-action 'self'; + frame-ancestors 'none'; + object-src 'none'; + upgrade-insecure-requests + "; } # Add Permissions-Policy for HTML documents. |