From 1077491423cd7a256f964041d4c886349dfbf0a7 Mon Sep 17 00:00:00 2001
From: Max Nuding <max.nuding@icloud.com>
Date: Thu, 17 Jul 2025 21:05:37 +0200
Subject: [PATCH] add several headers to default apache config

---
 apache2.conf.EXAMPLE | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/apache2.conf.EXAMPLE b/apache2.conf.EXAMPLE
index 932d1eb..900e22b 100644
--- a/apache2.conf.EXAMPLE
+++ b/apache2.conf.EXAMPLE
@@ -32,6 +32,10 @@
       Header set Cache-Control "public,max-age=31536000,immutable"
     </Directory>
 
+    Header set X-Content-Type-Options "nosniff"
+    Header set Strict-Transport-Security "max-age=15768000; includeSubDomains"
+    Header set X-Frame-Options "DENY"
+
     ProxyPass / http://localhost:3000/
     ProxyPassReverse / http://localhost:3000/