remove optional headers

bvandenabbeele · bvandenabbeele · commit 18707c117792 · 2024-11-27T12:21:00.000+01:00
diff --git a/romm.subdomain.conf.sample b/romm.subdomain.conf.sample
@@ -42,14 +42,5 @@ server {
         set $upstream_proto http;
         proxy_pass $upstream_proto://$upstream_app:$upstream_port;
 
-        # Hide version
-        server_tokens off;
-
-        # Security headers
-        add_header X-Frame-Options "SAMEORIGIN" always;
-        add_header X-Content-Type-Options "nosniff" always;
-        add_header X-XSS-Protection "1; mode=block" always;
-        add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;
-        add_header Referrer-Policy "no-referrer-when-downgrade" always;
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -42,14 +42,5 @@ server {`
`42`	`42`	`set $upstream_proto http;`
`43`	`43`	`proxy_pass $upstream_proto://$upstream_app:$upstream_port;`
`44`	`44`
`45`		`- # Hide version`
`46`		`- server_tokens off;`
`47`		`-`
`48`		`- # Security headers`
`49`		`- add_header X-Frame-Options "SAMEORIGIN" always;`
`50`		`- add_header X-Content-Type-Options "nosniff" always;`
`51`		`- add_header X-XSS-Protection "1; mode=block" always;`
`52`		`- add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always;`
`53`		`- add_header Referrer-Policy "no-referrer-when-downgrade" always;`
`54`	`45`	`}`
`55`	`46`	`}`