500.conf 851 B

123456789101112131415161718
  1. error_page 500 502 503 504 /500.html;
  2. location = /500.html {
  3. root /opt/cunnyborea/instance/static/static/error/500;
  4. internal;
  5. add_header Strict-Transport-Security "max-age=31536000; includeSubdomains; preload";
  6. add_header X-Content-Type-Options "nosniff";
  7. add_header X-XSS-Protection "1; mode=block";
  8. add_header X-Permitted_Cross-Domain-Policies none;
  9. add_header X-Frame-Options "self";
  10. add_header Referrer-Policy "same-origin";
  11. add_header X-Download-Options noopen;
  12. # CSP
  13. add_header Content-Security-Policy "default-src 'none'; connect-src 'self'; font-src 'self'; img-src 'self' https: data:; media-src 'self' https:; script-src 'self'; style-src 'self' 'unsafe-inline'; worker-src 'self'; frame-ancestors 'self'";
  14. }
  15. #location = /static/sjw.asc {
  16. # alias /opt/pleroma/instance/static/static/sjw.asc;
  17. #}