aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorQuentin Dufour <quentin@deuxfleurs.fr>2022-05-04 09:19:46 +0200
committerQuentin Dufour <quentin@deuxfleurs.fr>2022-05-04 09:20:07 +0200
commit4cb1dbe6637ba3d0908c9f78f316606a9bf864e3 (patch)
tree695d16687654e325daa8e0388a62f796dd7f1b70
parentd21c010da127fcedf09823b5269948360f3a3cf0 (diff)
downloadinfrastructure-4cb1dbe6637ba3d0908c9f78f316606a9bf864e3.tar.gz
infrastructure-4cb1dbe6637ba3d0908c9f78f316606a9bf864e3.zip
Add a security HTTPS header to Garage web
-rw-r--r--app/garage/deploy/garage.hcl1
1 files changed, 1 insertions, 0 deletions
diff --git a/app/garage/deploy/garage.hcl b/app/garage/deploy/garage.hcl
index e03c423..67db8df 100644
--- a/app/garage/deploy/garage.hcl
+++ b/app/garage/deploy/garage.hcl
@@ -98,6 +98,7 @@ job "garage" {
tags = [
"garage-web",
"tricot * 1",
+ "tricot-add-header Content-Security-Policy default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'"
]
port = 3902
address_mode = "driver"