From 63bd94f02b6c9a81fdae1c470421926c05a309de Mon Sep 17 00:00:00 2001 From: Marius Date: Thu, 30 Apr 2026 13:01:03 +0200 Subject: [PATCH] ALB - migration update --- nginx.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/nginx.conf b/nginx.conf index f9e1960c..15392163 100644 --- a/nginx.conf +++ b/nginx.conf @@ -35,6 +35,9 @@ http { root /usr/share/nginx/html; + # Content Security Policy for AWS migration: emit from origin instead of ingress annotations + add_header Content-Security-Policy "default-src 'self' https://*.isaaccomputerscience.org https://www.youtube-nocookie.com https://www.youtube.com https://api.github.com; object-src 'none'; frame-src 'self' https://*.isaaccomputerscience.org https://www.youtube-nocookie.com; img-src 'self' data: https://*.isaaccomputerscience.org https://*.tile.openstreetmap.org https://developers.google.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://*.isaaccomputerscience.org https://fonts.gstatic.com;" always; + location /static { # Strongly cache these things for at least 30 days add_header Cache-Control "public, max-age=2592000, no-transform";