From 9d68fa9d27f53815d2b66b9cd3dd4d54636c3ee3 Mon Sep 17 00:00:00 2001 From: Johannes Löthberg Date: Thu, 30 May 2019 17:34:03 +0200 Subject: Fix quoting again MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Johannes Löthberg --- nginx/base.sls | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/nginx/base.sls b/nginx/base.sls index cd0bf2f..b876202 100644 --- a/nginx/base.sls +++ b/nginx/base.sls @@ -31,7 +31,7 @@ nginx: snippets: security_headers: # https://developer.mozilla.org/en-US/docs/Security/HTTP_Strict_Transport_Security - - add_header: 'Strict-Transport-Security "max-age=31536000"' + - add_header: Strict-Transport-Security "max-age=31536000" # Tell browsers not to render the page inside a frame, and avoid clickjacking. - add_header: X-Frame-Options SAMEORIGIN @@ -41,10 +41,10 @@ nginx: # Enable the Cross-site scripting filter in most recent browsers. # Normally enabled by default, but enable it anyway if user has disabled it. - - add_header: 'X-XSS-Protection "1; mode=block"' + - add_header: X-XSS-Protection "1; mode=block" - - add_header: 'Referrer-Policy: same-origin' - - add_header: "Feature-Policy: geolocation 'none'; midi 'none'; notifications 'none'; push 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; vibrate 'none'; fullscreen 'none'; payment" + - add_header: Referrer-Policy same-origin + - add_header: Feature-Policy "geolocation 'none'; midi 'none'; notifications 'none'; push 'none'; sync-xhr 'none'; microphone 'none'; camera 'none'; magnetometer 'none'; gyroscope 'none'; speaker 'none'; vibrate 'none'; fullscreen 'none'; payment 'none'" servers: managed_opts: @@ -56,4 +56,4 @@ nginx: dir_opts: clean: 'on' -# vim: ft=yaml et: +# vim: ft=yaml et ts=2 sts=2 sw=2: -- cgit v1.2.3-54-g00ecf