Beta Branch update nginx vhost templates

update nginx vhost templates

add optional security headers commented out by default

---

Continue reading...

123.09beta01 branch

• Branch: https://github.com/centminmod/centminmod/tree/123.09beta01
• Commit History: https://github.com/centminmod/centminmod/commits/123.09beta01

 

if you read the actual commit linked above update nginx vhost templates · centminmod/centminmod@e7a2c90 · GitHub you can see

there's unified or split view top right buttons to see diff of before and after changes which marks the exact line within respective files

for http vhost it's between the pagespeed 3rd include line and limit_conn lines

Code:

#include /usr/local/nginx/conf/pagespeedstatslog.conf;

  #add_header X-Frame-Options SAMEORIGIN;
  #add_header X-Xss-Protection "1; mode=block" always;
  #add_header X-Content-Type-Options "nosniff" always;

  # limit_conn limit_per_ip 16;

for https vhost it's replacing

Code:

  #add_header  X-Content-Type-Options "nosniff";
  #add_header X-Frame-Options DENY;

with

Code:

  #add_header X-Frame-Options SAMEORIGIN;
  #add_header X-Xss-Protection "1; mode=block" always;
  #add_header X-Content-Type-Options "nosniff" always;

Also updated the official vhost generator with same template additions for these additional security headers at centminmod.com/vhost.php.