diff options
| -rw-r--r-- | content/searxng.md | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/content/searxng.md b/content/searxng.md index e238f0f..ad23ac7 100644 --- a/content/searxng.md +++ b/content/searxng.md @@ -75,6 +75,15 @@ server { access_log /dev/null; error_log /dev/null; + # X-Frame-Options (XFO) header set to DENY + add_header X-Frame-Options "DENY"; + + # HTTP Strict Transport Security (HSTS) header + add_header Strict-Transport-Security "max-age=31536000; includeSubDomains"; + + # Content Security Policy (CSP) + add_header Content-Security-Policy "default-src 'self';"; + location / { uwsgi_pass unix:///usr/local/searxng/run/socket; |