set baseline nginx root directory in http block

This commit is contained in:
Daniel Micay 2023-02-19 11:51:37 -05:00
parent 7725a8617d
commit d3c60a104b

View File

@ -12,6 +12,8 @@ events {
}
http {
root /var/empty;
include mime.types;
default_type application/octet-stream;
@ -102,8 +104,6 @@ http {
listen [::]:80;
server_name matrix.grapheneos.org element.grapheneos.org;
root /var/empty;
location /.well-known/acme-challenge/ {
root /srv/certbot;
}
@ -124,8 +124,6 @@ http {
listen [::]:443 ssl http2;
server_name matrix.grapheneos.org;
root /var/empty;
include snippets/security-headers.conf;
add_header Cross-Origin-Resource-Policy "same-origin" always;
add_header Content-Security-Policy "font-src 'none'; manifest-src 'none'; object-src 'none'; script-src 'none'; style-src 'none'; frame-ancestors 'none'; block-all-mixed-content" always;
@ -187,8 +185,6 @@ http {
server {
listen unix:/run/nginx/status.sock;
root /var/empty;
access_log off;
location = / {