error_page 500 502 503 504 /500.html;
location = /500.html {
root /opt/cunnyborea/instance/static/static/error/500;
internal;
add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
add_header X-Content-Type-Options "nosniff";
add_header X-XSS-Protection "1; mode=block";
add_header X-Permitted_Cross-Domain-Policies none;
add_header X-Frame-Options "self";
add_header Referrer-Policy "same-origin";
add_header X-Download-Options noopen;
# CSP
add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src 'self'; img-src 'self' https: data:; media-src 'self' https:; script-src 'self'; style-src 'self' 'unsafe-inline'; worker-src 'self'; frame-ancestors 'self'";
}
#location = /static/sjw.asc {
# alias /opt/pleroma/instance/static/static/sjw.asc;
#}