Merge pull request 'Set the nginx Content-Security-Policy header to allow embedding the Gitea instance in an iframe on the pad.lassul.us instance.' (#148) from Qubasa-main into main
All checks were successful
checks / test (push) Successful in 26s

This commit is contained in:
clan-bot 2024-03-17 11:21:19 +00:00
commit 60b8b56522

View File

@ -36,8 +36,10 @@
services.nginx.virtualHosts."git.clan.lol" = {
forceSSL = true;
enableACME = true;
# The add_header directive is used to set the Content-Security-Policy header to allow embedding the Gitea instance in an iframe on the pad.lassul.us instance.
locations."/".extraConfig = ''
proxy_pass http://localhost:3002;
add_header Content-Security-Policy "frame-ancestors 'self' https://pad.lassul.us";
'';
};
}