Re-include comment about NC security scans

Signed-off-by: Eric Nemchik <eric@nemchik.com>
This commit is contained in:
Eric Nemchik 2023-06-24 20:43:42 -05:00
parent cc22ea5d0b
commit f6d6c03080
No known key found for this signature in database
2 changed files with 2 additions and 0 deletions

View file

@ -33,6 +33,7 @@ server {
proxy_pass $upstream_proto://$upstream_app:$upstream_port; proxy_pass $upstream_proto://$upstream_app:$upstream_port;
# Hide proxy response headers from Nextcloud that conflict with ssl.conf # Hide proxy response headers from Nextcloud that conflict with ssl.conf
# Uncomment the Optional additional headers in SWAG's ssl.conf to pass Nextcloud's security scan
proxy_hide_header Referrer-Policy; proxy_hide_header Referrer-Policy;
proxy_hide_header X-Content-Type-Options; proxy_hide_header X-Content-Type-Options;
proxy_hide_header X-Frame-Options; proxy_hide_header X-Frame-Options;

View file

@ -40,6 +40,7 @@ location ^~ /nextcloud/ {
proxy_ssl_session_reuse off; proxy_ssl_session_reuse off;
# Hide proxy response headers from Nextcloud that conflict with ssl.conf # Hide proxy response headers from Nextcloud that conflict with ssl.conf
# Uncomment the Optional additional headers in SWAG's ssl.conf to pass Nextcloud's security scan
proxy_hide_header Referrer-Policy; proxy_hide_header Referrer-Policy;
proxy_hide_header X-Content-Type-Options; proxy_hide_header X-Content-Type-Options;
proxy_hide_header X-Frame-Options; proxy_hide_header X-Frame-Options;