# Support for Custom Nginx Security Headers

**Project:** Applications | **Board:** Live | **Votes:** 1
**URL:** https://roadmap.ploi.cloud/projects/3-applications/items/13-support-for-custom-nginx-security-headers

---

Due to NEN/ISO certifications and customer requirements, it would be nice to have a way to configure Nginx security headers, think about:

* ssl_protocols, ssl_ciphers
* X-Frame-Options, X-XSS-Protection, X-Content-Type-Options
* Referrer-Policy, Permissions-Policy, Strict-Transport-Security

Currently, we copy configs during build in our testing-env's with containers, the configs lives in our main GitHub repository

```
COPY .serversideup/nginx/conf.d /etc/nginx/conf.d
COPY .serversideup/nginx/server-opts.d /etc/nginx/server-opts.d
COPY .serversideup/nginx/site-opts.d /etc/nginx/site-opts.d
```

Maybe this is already a working solution, or if possible we can have some settings to configure headers in the UI of PC.

Thanks!

---

## Comments

**Zander van der Meer** (2025-08-27T12:24:06+00:00):
This feature is now available publicly!

![](http://roadmap.ploi.cloud/storage/SAX6Fjt1eQMQxs1VqlP3UYDg7DYszPF5avvUlLzD.png)