error_page 500 502 503 504 /500.html; location = /500.html { root /opt/cunnyborea/instance/static/static/error/500; internal; add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload"; add_header X-Content-Type-Options "nosniff"; add_header X-XSS-Protection "1; mode=block"; add_header X-Permitted_Cross-Domain-Policies none; add_header X-Frame-Options "self"; add_header Referrer-Policy "same-origin"; add_header X-Download-Options noopen; # CSP add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src 'self'; img-src 'self' https: data:; media-src 'self' https:; script-src 'self'; style-src 'self' 'unsafe-inline'; worker-src 'self'; frame-ancestors 'self'"; } #location = /static/sjw.asc { # alias /opt/pleroma/instance/static/static/sjw.asc; #}