add several headers to default apache config

2025-07-17 21:05:37 +02:00
parent 348fc929d9
commit 1077491423
1 changed files with 4 additions and 0 deletions
--- a/apache2.conf.EXAMPLE
+++ b/apache2.conf.EXAMPLE
@ -32,6 +32,10 @@
      Header set Cache-Control "public,max-age=31536000,immutable"
    </Directory>

+    Header set X-Content-Type-Options "nosniff"
+    Header set Strict-Transport-Security "max-age=15768000; includeSubDomains"
+    Header set X-Frame-Options "DENY"
+
    ProxyPass / http://localhost:3000/
    ProxyPassReverse / http://localhost:3000/