2017-07-15 15:24:48 +00:00
|
|
|
# {{ ansible_managed }}
|
2017-07-15 20:33:16 +00:00
|
|
|
# default header settings
|
2018-08-14 20:35:00 +00:00
|
|
|
{% if nginx_tls_enabled and nginx_tls_hsts_enabled %}
|
2018-08-13 19:41:12 +00:00
|
|
|
add_header Strict-Transport-Security{% if nginx_hsts_options is defined %} "{{ nginx_hsts_options | join("; ") }}"{% endif %};
|
2018-08-14 20:35:00 +00:00
|
|
|
{% endif %}
|
2017-07-15 15:24:48 +00:00
|
|
|
add_header X-Frame-Options DENY;
|
|
|
|
|
add_header X-Content-Type-Options nosniff;
|
|
|
|
|
add_header X-XSS-Protection "1; mode=block";
|
