From 43d993f864718a141727c8af5cfe203f4942c3d8 Mon Sep 17 00:00:00 2001 From: Infinidoge Date: Wed, 21 May 2025 00:29:45 -0400 Subject: [PATCH] Infini-DL360/web: adjust content type options and HSTS headers --- hosts/Infini-DL360/web.nix | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/hosts/Infini-DL360/web.nix b/hosts/Infini-DL360/web.nix index 3c8261f..122c66e 100644 --- a/hosts/Infini-DL360/web.nix +++ b/hosts/Infini-DL360/web.nix @@ -50,7 +50,7 @@ let location ~ "/\..+" { deny all; } add_header Content-Security-Policy "${cspString}"; - add_header X-Content-Type-Options "nosniff;"; + add_header X-Content-Type-Options "nosniff"; ''; mkRedirect = to: ssl-optional // { globalRedirect = to; }; @@ -73,7 +73,7 @@ in extraConfig = websiteConfig + '' - add_header Strict-Transport-Security "max-age=2592000;"; + add_header Strict-Transport-Security "max-age=15768000;"; ''; }; };