diff --git a/services/nginx/default.nix b/services/nginx/default.nix index 40621db..498c894 100644 --- a/services/nginx/default.nix +++ b/services/nginx/default.nix @@ -55,16 +55,16 @@ in https "max-age=31536000; includeSubdomains; preload"; } add_header Strict-Transport-Security $hsts_header; - + # Enable CSP for your services. #add_header Content-Security-Policy "script-src 'self'; object-src 'none'; base-uri 'none';" always; - + # Minimize information leaked to other domains add_header 'Referrer-Policy' 'origin-when-cross-origin'; - + # Disable embedding as a frame add_header X-Frame-Options DENY; - + # Prevent injection of code in other mime types (XSS Attacks) add_header X-Content-Type-Options nosniff; client_body_buffer_size 400M; @@ -121,7 +121,7 @@ in forceSSL = true; enableACME = true; locations."/" = { - proxyPass = "http://192.168.1.25:9000"; + proxyPass = "http://192.168.1.125:9000"; recommendedProxySettings = true; proxyWebsockets = true; };