2 files changed, 42 insertions, 0 deletions
diff --git a/terminaldweller.com/yggdrasil/docker-compose.yaml b/terminaldweller.com/yggdrasil/docker-compose.yaml
new file mode 100644
index 0000000..5dd0c4c
--- /dev/null
+++ b/terminaldweller.com/yggdrasil/docker-compose.yaml
@@ -0,0 +1,20 @@
+version: "3"
+services:
+  nginx:
+    image: nginx:stable
+    networks:
+      - mainnet
+    ports:
+      - "[21e:cd57:a147:322a:723b:a322:e4c8:c26e]:80:80"
+    restart: unless-stopped
+    volumes:
+      - ./nginx.conf:/etc/nginx/nginx.conf:ro
+      - ./srv:/srv:ro
+    cap_drop:
+      - ALL
+    cap_add:
+      - CHOWN
+      - SETGID
+      - SETUID
+networks:
+  mainnet:
diff --git a/terminaldweller.com/yggdrasil/nginx.conf b/terminaldweller.com/yggdrasil/nginx.conf
new file mode 100644
index 0000000..c8e6ad9
--- /dev/null
+++ b/terminaldweller.com/yggdrasil/nginx.conf
@@ -0,0 +1,22 @@
+events {
+  worker_connections 1024;
+}
+http {
+  server {
+    listen 80;
+    keepalive_timeout 70;
+    add_header Content-Security-Policy "default-src 'self';";
+    add_header X-Frame-Options SAMEORIGIN always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header X-XSS-Protection "1; mode=block" always;
+    add_header Referrer-Policy "no-referrer";
+    sendfile on;
+    tcp_nopush on;
+
+    location / {
+      root /srv/;
+      add_header Access-Control-Allow-Origin "*";
+      add_header Content-Disposition "inline";
+    }
+  }
+}