15 Commits

Author	SHA1	Message	Date
Daniel Micay	87d3dff258	more initial CSP working around Element flaws	2021-06-18 17:35:06 -04:00
Daniel Micay	1cbd223eee	mark obsolete X-Frame-Options header as such	2021-06-18 05:34:44 -04:00
Daniel Micay	e5da30c9a6	set same-origin COOP header	2021-06-18 05:27:08 -04:00
Daniel Micay	7abbe44836	reorder server blocks	2021-06-18 05:22:16 -04:00
Daniel Micay	7743e8ebf6	add explicit support for element http redirect	2021-06-18 05:20:47 -04:00
Daniel Micay	e32083f8cf	remove unnecessary escaping	2021-06-18 05:17:13 -04:00
Daniel Micay	60dd91024d	no need for case insensitive API path matching	2021-06-18 05:16:14 -04:00
Daniel Micay	391d7ef680	explicitly block mixed content	2021-06-18 05:08:04 -04:00
Daniel Micay	144698a02f	set up basic frame security headers	2021-06-18 05:05:39 -04:00
Daniel Micay	f9a50f988a	add obsolete X-XSS-Protection header	2021-06-18 04:38:26 -04:00
Daniel Micay	af4c95f166	mark Expect-CT as partially obsolete	2021-06-18 04:38:02 -04:00
Daniel Micay	c473761dfb	avoid having element instance indexed	2021-06-18 04:17:51 -04:00
Daniel Micay	b7952c7ce0	add element.grapheneos.org domain	2021-06-18 00:55:51 -04:00
Daniel Micay	3d99bfadd3	raise proxy_read_timeout for synapse	2021-06-07 14:46:25 -04:00
Daniel Micay	b5b55be1a6	add nginx configuration	2021-05-24 14:32:54 -04:00