39 lines
1.6 KiB
Plaintext
39 lines
1.6 KiB
Plaintext
#
|
|
# This file is provided by publik-common package: DO NOT EDIT.
|
|
#
|
|
|
|
location ~ ^/static/(.+)$ {
|
|
root /;
|
|
try_files /var/lib/combo/tenants/$host/static/$1
|
|
/var/lib/combo/tenants/$host/theme/static/$1
|
|
/var/lib/combo/collectstatic/$1
|
|
=404;
|
|
add_header 'X-Content-Type-Options' 'nosniff';
|
|
add_header 'X-XSS-Protection' '1; mode=block';
|
|
add_header 'Content-Security-Policy' "default-src 'none'; style-src 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; img-src 'self' data:;";
|
|
add_header 'Access-Control-Allow-Origin' '*';
|
|
include snippets/publik-gzip.conf;
|
|
}
|
|
|
|
location ~ ^/media/(.+)$ {
|
|
alias /var/lib/combo/tenants/$host/media/$1;
|
|
add_header 'X-Content-Type-Options' 'nosniff';
|
|
add_header 'X-XSS-Protection' '1; mode=block';
|
|
add_header 'Content-Security-Policy' "default-src 'none'; style-src 'self' 'unsafe-inline'; object-src 'self' 'unsafe-inline'; img-src 'self' data:;";
|
|
include snippets/publik-gzip.conf;
|
|
}
|
|
|
|
location ~ ^/.well-known/pki-validation/(.+)$ {
|
|
alias /var/lib/combo/tenants/$host/well-known/pki-validation/$1;
|
|
}
|
|
location / {
|
|
proxy_pass http://unix:/var/run/combo/combo.sock;
|
|
proxy_set_header Host $http_host;
|
|
proxy_set_header X-Forwarded-SSL on;
|
|
proxy_set_header X-Forwarded-Protocol ssl;
|
|
proxy_set_header X-Forwarded-Proto https;
|
|
proxy_set_header X-Real-IP $remote_addr;
|
|
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
add_header 'X-Content-Type-Options' 'nosniff';
|
|
add_header 'X-XSS-Protection' '1; mode=block';
|
|
} |