Due to NEN/ISO certifications and customer requirements, it would be nice to have a way to configure Nginx security headers, think about:
- ssl_protocols, ssl_ciphers
- X-Frame-Options, X-XSS-Protection, X-Content-Type-Options
- Referrer-Policy, Permissions-Policy, Strict-Transport-Security
Currently, we copy configs during build in our testing-env's with containers, the configs lives in our main GitHub repository
COPY .serversideup/nginx/conf.d /etc/nginx/conf.d
COPY .serversideup/nginx/server-opts.d /etc/nginx/server-opts.d
COPY .serversideup/nginx/site-opts.d /etc/nginx/site-opts.d
Maybe this is already a working solution, or if possible we can have some settings to configure headers in the UI of PC.
Thanks!
Support for Custom Nginx Security Headers
-
Zander van der Meer moved item to board Live
3 months ago -
Zander van der Meer moved item to board In progress
4 months ago -
Nick moved item to project Applications
4 months ago -
Nick created the item
4 months ago