Added CSP

2022-04-20 14:03:46 +02:00 · 2022-04-20 14:03:46 +02:00 · df1582b143
commit df1582b143
parent a45c99532b
1 changed files with 3 additions and 0 deletions
--- a/.drone/helm/staging-val.yaml
+++ b/.drone/helm/staging-val.yaml
@ -6,6 +6,9 @@ ingress:
  annotations:
    cert-manager.io/cluster-issuer: letsencrypt-staging
    external-dns.alpha.kubernetes.io/hostname: "newsite.staging.dutchellie.nl"
+    nginx.ingress.kubernetes.io/configuration-snippet: |   
+      add_header X-Frame-Options "sameorigin";
+      add_header Content-Security-Policy "default-src 'self' frame-ancestors 'forestofunix.xyz';
  tls:
    - hosts:
        - newsite.staging.dutchellie.nl