aboutsummaryrefslogtreecommitdiff
path: root/cluster/prod/app/garage/deploy
diff options
context:
space:
mode:
authorQuentin Dufour <quentin@deuxfleurs.fr>2023-07-23 14:36:04 +0200
committerQuentin Dufour <quentin@deuxfleurs.fr>2023-07-23 14:36:04 +0200
commitaaa80ae678b256525d1c32bf4d978905bb5076f1 (patch)
treef8ce9c88c14198ed403b49bff5b095fcf2f7de2e /cluster/prod/app/garage/deploy
parent233556e9ef8982f6818e250fe7471308986f16f2 (diff)
downloadnixcfg-aaa80ae678b256525d1c32bf4d978905bb5076f1.tar.gz
nixcfg-aaa80ae678b256525d1c32bf4d978905bb5076f1.zip
final csp
Diffstat (limited to 'cluster/prod/app/garage/deploy')
-rw-r--r--cluster/prod/app/garage/deploy/garage.hcl3
1 files changed, 1 insertions, 2 deletions
diff --git a/cluster/prod/app/garage/deploy/garage.hcl b/cluster/prod/app/garage/deploy/garage.hcl
index 34eb0cc..26f76de 100644
--- a/cluster/prod/app/garage/deploy/garage.hcl
+++ b/cluster/prod/app/garage/deploy/garage.hcl
@@ -98,8 +98,7 @@ job "garage" {
tags = [
"garage-web",
"tricot * 1",
- #"tricot-add-header Content-Security-Policy default-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://code.jquery.com/; frame-ancestors 'self'",
- "tricot-add-header Content-Security-Policy default-src https: 'unsafe-inline'",
+ "tricot-add-header Content-Security-Policy default-src https: 'unsafe-inline'; object-src 'none'",
"tricot-add-header Strict-Transport-Security max-age=63072000; includeSubDomains; preload",
"tricot-add-header X-Frame-Options SAMEORIGIN",
"tricot-add-header X-XSS-Protection 1; mode=block",