Add headers in Garage

This commit is contained in:
Quentin 2022-05-05 08:50:21 +02:00
parent d7164c7d90
commit f27636dd14
Signed by: quentin
GPG key ID: E9602264D639FF68

View file

@ -98,7 +98,10 @@ job "garage" {
tags = [
"garage-web",
"tricot * 1",
"tricot-add-header Content-Security-Policy default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'"
"tricot-add-header Content-Security-Policy default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://code.jquery.com/; frame-ancestors 'self'",
"tricot-add-header Strict-Transport-Security max-age=63072000; includeSubDomains; preload",
"tricot-add-header X-Frame-Options SAMEORIGIN",
"tricot-add-header X-XSS-Protection 1; mode=block",
]
port = 3902
address_mode = "driver"