summary refs log tree commit diff stats
path: root/config.toml
diff options
context:
space:
mode:
authorAlan Pearce2023-09-16 12:58:25 +0200
committerAlan Pearce2025-03-16 00:56:49 +0100
commita8bc8b9386275363370533fbd1d09aea3a92cb61 (patch)
tree4ad13b48da81a723c2e1d0700095526ba7937765 /config.toml
parent04a90ab7f92d0022c9357fd3cbfe30fba29f56e2 (diff)
downloadwebsite-a8bc8b9386275363370533fbd1d09aea3a92cb61.tar.lz
website-a8bc8b9386275363370533fbd1d09aea3a92cb61.tar.zst
website-a8bc8b9386275363370533fbd1d09aea3a92cb61.zip
Send HSTS header from Fly proxy
Bun seems to eat this header otherwise
Diffstat (limited to 'config.toml')
-rw-r--r--config.toml3
1 files changed, 1 insertions, 2 deletions
diff --git a/config.toml b/config.toml
index 5bfa399..a368e18 100644
--- a/config.toml
+++ b/config.toml
@@ -20,8 +20,7 @@ feed = true
 [extra.headers]
 cache-control = "max-age=14400"
 x-content-type-options = "nosniff"
-strict-transport-security = "max-age=31536000; includeSubdomains; preload"
-content-security-policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline'; form-action 'none'; base-uri 'self'"
+content-security-policy = "default-src 'none'; img-src 'self'; object-src 'none'; script-src 'self'; style-src 'unsafe-inline'; form-action 'none'; base-uri 'self'; frame-ancestors https://kagi.com;"
 
 [[extra.main_menu]]
     name = "Home"