1 files changed, 6 insertions, 0 deletions
diff --git a/nginx-example.conf b/nginx-example.conf
index 97e5027..f3d9252 100644
--- a/nginx-example.conf
+++ b/nginx-example.conf
@@ -30,5 +30,11 @@ server {
         fastcgi_pass unix:/run/fcgiwrap.sock;
         include /etc/nginx/fastcgi_params;
     }
+
+    add_header Strict-Transport-Security "max-age=63072000; preload";
+    add_header Content-Security-Policy "default-src 'self'";
+    add_header X-Frame-Options DENY;
+    add_header Access-Control-Allow-Origin https://$server_name;
+    add_header Vary Origin; # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Access-Control-Allow-Origin#cors_and_caching
 }