1 files changed, 8 insertions, 1 deletions
diff --git a/spring-front/nginx.conf b/spring-front/nginx.conf
index 197ba1f..bd12e62 100644
--- a/spring-front/nginx.conf
+++ b/spring-front/nginx.conf
@@ -2,16 +2,23 @@ events {
   worker_connections 1024;
 }
 http {
-  include mime.types;
+  include /etc/nginx/mime.types;
   server {
     listen 443 ssl http2;
     keepalive_timeout 70;
+    charset utf-8;
     ssl_certificate /certs/server.cert;
     ssl_certificate_key /certs/server.key;
     ssl_protocols TLSv1.2 TLSv1.3;
     ssl_ciphers HIGH:!aNULL:!MD5;
     sendfile on;
     tcp_nopush on;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
+    add_header Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' unpkg.com; style-src 'self' 'unsafe-inline' unpkg.com";
+    add_header X-Frame-Options SAMEORIGIN always;
+    add_header X-XSS-Protection "1; mode=block" always;
+    fastcgi_hide_header X-Powered-By;
     location / {
       root /usr/share/nginx/html;
       index index.html;