fix: align nginx with production smoke gate

This commit is contained in:
2026-09-02 11:05:34 +03:00
parent 0119e425ec
commit 259f52a02b
3 changed files with 47 additions and 3 deletions

View File

@@ -25,6 +25,11 @@ server {
root __DOCUMENT_ROOT__;
index index.html;
gzip on;
gzip_vary on;
gzip_min_length 1;
gzip_types text/css application/javascript application/json image/svg+xml;
add_header Content-Security-Policy "default-src 'self'; script-src 'self' '__JSON_LD_CSP_HASH__'; style-src 'self'; img-src 'self' data:; media-src 'self'; font-src 'self'; connect-src 'none'; object-src 'none'; base-uri 'none'; frame-ancestors 'none'; form-action 'self'; upgrade-insecure-requests" always;
add_header X-Content-Type-Options "nosniff" always;
add_header Referrer-Policy "no-referrer" always;
@@ -32,6 +37,7 @@ server {
add_header X-Frame-Options "DENY" always;
add_header Cache-Control $portfolio_cache_control always;
add_header Strict-Transport-Security "max-age=31536000" always;
add_header X-Portfolio-Manifest-Digest "__MANIFEST_DIGEST__" always;
location = / { try_files /index.html =404; }
location = /index.html { try_files /index.html =404; }