krd/angie-conv-image
1
0
Fork 0
Code

missing parts for headers

Browse Source
This commit is contained in:
Konstantin Demin 2024-08-01 08:40:17 +03:00
parent 6c59107425
commit 6401721ceb
Signed by: krd
GPG Key ID: 4D56F87A8BA65FD0
7 changed files with 18 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

0
angie/conf.dist/http-response-headers.conf.j2 → angie/autoconf.dist/http-response-headers.conf.j2
View File

3
angie/conf.dist/http-quic-gso.conf
View File

@ -1,3 +0,0 @@
quic_gso on;
proxy_quic_gso on;

5
angie/conf.dist/http-quic-gso.conf.j2 Normal file
View File

@ -0,0 +1,5 @@
quic_gso on;
{%- if env.NGX_HTTP_NO_PROXY == '0' %}
proxy_quic_gso on;
{%- endif %}

2
angie/conf.dist/http3/param.conf → angie/conf.dist/http3/param.conf.j2
View File

@ -2,6 +2,8 @@ http3_max_concurrent_streams 128; #default
http3_stream_buffer_size 64k; #default http3_stream_buffer_size 64k; #default
quic_active_connection_id_limit 3; quic_active_connection_id_limit 3;
{%- if env.NGX_HTTP_NO_PROXY == '0' %}
proxy_http3_max_concurrent_streams 128; #default proxy_http3_max_concurrent_streams 128; #default
proxy_http3_stream_buffer_size 64k; #default proxy_http3_stream_buffer_size 64k; #default
proxy_quic_active_connection_id_limit 3; proxy_quic_active_connection_id_limit 3;
{%- endif %}

9
angie/j2cfg.dist/headers-response-common.yml.j2 Normal file
View File

@ -0,0 +1,9 @@
{% if env.NGX_HTTP_TRANSPARENT_PROXY == '0' %}
response_headers:
Permissions-Policy: "accelerometer=(), autoplay=(), browsing-topics=(), camera=(), clipboard-read=(), clipboard-write=(), geolocation=(), gyroscope=(), hid=(), interest-cohort=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), sync-xhr=(), usb=()"
Referrer-Policy: "no-referrer-when-downgrade"
Strict-Transport-Security: "max-age=15724800; includeSubDomains; preload"
X-Content-Type-Options: "nosniff"
X-Frame-Options: "SAMEORIGIN"
X-XSS-Protection: "1; mode=block"
{% endif %}

7
angie/j2cfg.dist/headers-response.yml
View File

@ -1,7 +0,0 @@
response_headers:
Permissions-Policy: "microphone=(), camera=(), geolocation=(), interest-cohort=()"
Referrer-Policy: "no-referrer-when-downgrade"
Strict-Transport-Security: "max-age=15724800; includeSubDomains; preload"
X-Content-Type-Options: "nosniff"
X-Frame-Options: "SAMEORIGIN"
X-XSS-Protection: "1; mode=block"

1
image-entry.d/21-http-modules.envsh
View File

@ -4,6 +4,7 @@ if [ "${NGX_HTTP}" = 0 ] ; then
unset NGX_HTTP_NO_PROXY NGX_HTTP_WITH_MODSECURITY unset NGX_HTTP_NO_PROXY NGX_HTTP_WITH_MODSECURITY
else else
NGX_HTTP_NO_PROXY=$(gobool_to_int "${NGX_HTTP_NO_PROXY:-0}" 0) NGX_HTTP_NO_PROXY=$(gobool_to_int "${NGX_HTTP_NO_PROXY:-0}" 0)
export NGX_HTTP_NO_PROXY
if [ "${NGX_HTTP_NO_PROXY}" = 0 ] ; then if [ "${NGX_HTTP_NO_PROXY}" = 0 ] ; then
NGX_HTTP_CONFLOAD=$(append_list "${NGX_HTTP_CONFLOAD}" proxy) NGX_HTTP_CONFLOAD=$(append_list "${NGX_HTTP_CONFLOAD}" proxy)
fi fi