joao.goncalves
/
NgixProxy_Pathfinder
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

[Auto-Sync] Atualização das configurações em srvproxy001.itguys.com.br - 2025-09-26 23:37:49

This commit is contained in:
srvproxy001.itguys.com.br 2025-09-26 23:37:49 -03:00
parent dc491ca363
commit f8c9f254c4
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
nginx/sites-available/cloud.grupopralog.com.br.conf
View File

@ -99,12 +99,12 @@ server {
add_header Strict-Transport-Security "max-age=15552000; includeSubDomains" always;
add_header X-Content-Type-Options "nosniff" always;
# O header "X-XSS-Protection" foi removido por ser obsoleto.
proxy_hide_header "X-Frame-Options"; # Remove o header do backend para evitar duplicidade.
proxy_hide_header "X-Frame-Options";
proxy_hide_header "Feature-Policy";
add_header X-Frame-Options "SAMEORIGIN" always;
add_header Referrer-Policy "no-referrer" always;
# NOVO: Adiciona a Permissions-Policy para desativar funcionalidades sensíveis.
add_header Permissions-Policy "geolocation=(), midi=(), notifications=(), push=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), speaker=(), vibrate=(), fullscreen=(), payment=()" always;
add_header Permissions-Policy "geolocation=(), midi=(), sync-xhr=(), microphone=(), camera=(), magnetometer=(), gyroscope=(), fullscreen=(), payment=()" always;
# --- Bloco de Compressão (sem alterações) ---
brotli on;
brotli_comp_level 6;