diff options
| author | Alan Pearce | 2023-09-16 12:58:25 +0200 |
|---|---|---|
| committer | Alan Pearce | 2023-09-16 12:58:25 +0200 |
| commit | 88137b206259c5bcb21edd99f4ec5d0987313d4b (patch) | |
| tree | 4ea864cd55c0825fa784f054e86a0e89efe5849e | |
| parent | d9d53c1951ae4a1c13f240e2d88a7bf746383858 (diff) | |
| download | website-88137b206259c5bcb21edd99f4ec5d0987313d4b.tar.lz website-88137b206259c5bcb21edd99f4ec5d0987313d4b.tar.zst website-88137b206259c5bcb21edd99f4ec5d0987313d4b.zip | |
Send HSTS header from Fly proxy
Bun seems to eat this header otherwise
| -rw-r--r-- | config.toml | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/config.toml b/config.toml index 7dbffcc..f7ec542 100644 --- a/config.toml +++ b/config.toml @@ -28,8 +28,7 @@ webserver_sends_csp_headers = true [extra.headers] cache-control = "max-age=14400" x-content-type-options = "nosniff" -strict-transport-security = "max-age=31536000; includeSubdomains; preload" -content-security-policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline'; form-action 'none'; base-uri 'self'" +content-security-policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline'; form-action 'none'; base-uri 'self'; frame-ancestors https://kagi.com;" [[extra.main_menu]] name = "Posts" |