From 4cb1dbe6637ba3d0908c9f78f316606a9bf864e3 Mon Sep 17 00:00:00 2001
From: Quentin Dufour <quentin@deuxfleurs.fr>
Date: Wed, 4 May 2022 09:19:46 +0200
Subject: [PATCH] Add a security HTTPS header to Garage web

---
 app/garage/deploy/garage.hcl | 1 +
 1 file changed, 1 insertion(+)

diff --git a/app/garage/deploy/garage.hcl b/app/garage/deploy/garage.hcl
index e03c423..67db8df 100644
--- a/app/garage/deploy/garage.hcl
+++ b/app/garage/deploy/garage.hcl
@@ -98,6 +98,7 @@ job "garage" {
         tags = [
             "garage-web",
             "tricot * 1",
+            "tricot-add-header Content-Security-Policy default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'"
         ]
         port = 3902
         address_mode = "driver"