Disroot-Ansible
/
nginx
11
1
Fork 0
Code Pull Requests 4 Projects Releases Activity

Merge branch 'master' into akaunting

This commit is contained in:
meaz 2021-04-17 05:38:33 +00:00
parent 0e13290571 ac73da2014
commit 80ae02fa4d
2 changed files with 9 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
templates/etc/nginx/sites-available/base.j2
View File

@ -8,10 +8,10 @@
{% block location %}
location / {
try_files {{ item.override_try_files | default('$uri $uri/ =404') }};
}
{% endblock %}
{% block app_root_location %}
{% endblock %}
}
{% block extra_locations %}
{% endblock %}

9
templates/etc/nginx/sites-available/core.j2
View File

@ -8,7 +8,7 @@
{% block server_info %}
## SERVER INFO
server {
server {
server_name {% if item.name is string %}{{ item.name }}{% else %}{{ item.name | join(' ') }}{% endif %};
{% if item.proto == 'http' %}
listen {{ item.listen }} {% if nginx_default_vhost == item.name %} default_server{% endif %};
@ -49,6 +49,10 @@ server {
{% if item.headers is defined and item.headers == 'none' %}
{% else %}
## HEADERS
{% if item.permission_policy is defined and item.permission_policy == 'none' %}
{% else %}
add_header Permissions-Policy "geolocation=(),interest-cohort=()";
{% endif %}
{% if item.secure_site is defined %}
add_header X-Download-Options noopen;
add_header X-Permitted-Cross-Domain-Policies none;
@ -83,7 +87,10 @@ server {
add_header X-XSS-Protection "1; mode=block";
{% endif %}
{% if item.robots is defined %}
{% if item.robots == 'none' %}
{% else %}
add_header X-Robots-Tag "{{ item.robots }}";
{% endif %}
{% else %}
add_header X-Robots-Tag none;
{% endif %}